Home Malware Programs Viruses Obfuscator.EW

Obfuscator.EW

Posted: December 8, 2010

Threat Metric

Threat Level: 8/10
Infected PCs: 347
First Seen: December 8, 2010
OS(es) Affected: Windows

Aliases

PSW.Delf.FPK [AVG]Mal/Agent-MQ [Sophos]Trojan-Dropper.Win32.Agent.dokd [Kaspersky]Win32.Lukicsel.O [eSafe]Suspicious.Cloud.5 [Symantec]a variant of Win32/Lukicsel.O [NOD32]a variant of Win32/Kryptik.ENE [NOD32]Cryptic.VV [AVG]Win32:Jifas-FQ [Avast]W32/Alureon.U.gen!Eldorado [Authentium]Packed.Win32.Tdss.q (v) [Sunbelt]Trj/CI.A [Panda]a variant of Win32/Kryptik.EML [NOD32]Generic FakeAlert.b [McAfee]Trojan.TDss [Ikarus]
More aliases (55)

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Obfuscator.EW may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner

Note: SpyHunter's free version is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter's malware tool to remove the malware threats. Learn more on SpyHunter. If you would like to uninstall SpyHunter for any reason, please follow these uninstall instructions. To learn more about our policies and practices, visit our EULA, Privacy Policy and Threat Assessment Criteria .

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\MSWINSCK.exe File name: MSWINSCK.exe
Size: 260.09 KB (260096 bytes)
MD5: 81fb185dcd7126688a9b5cecab2209d5
Detection count: 272
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\
Group: Malware file
Last Updated: December 8, 2010
%USERPROFILE%\Lokale Einstellungen\Anwendungsdaten\Microsoft\OIS\thumbnails\aton.exe File name: aton.exe
Size: 171.52 KB (171520 bytes)
MD5: a4980bac106907786cb4ec98822ec56e
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Lokale Einstellungen\Anwendungsdaten\Microsoft\OIS\thumbnails\
Group: Malware file
Last Updated: December 8, 2010
%PROGRAMFILES%\Data Protection\datprot.exe File name: datprot.exe
Size: 1.69 MB (1699840 bytes)
MD5: e2986c90a1b42a574df7f5c13751d788
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Data Protection\
Group: Malware file
Last Updated: December 8, 2010
%PROGRAMFILES%\Live Security Suite\LiveSS.exe File name: LiveSS.exe
Size: 5.84 MB (5849600 bytes)
MD5: 5c7d6e233bec82038c27883f4bff54dc
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Live Security Suite\
Group: Malware file
Last Updated: December 8, 2010
%WINDIR%\system32\cryptnet32.dll File name: cryptnet32.dll
Size: 48.12 KB (48128 bytes)
MD5: 775a5119701f6c55748fe728f0a1ece2
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32\
Group: Malware file
Last Updated: December 9, 2010