Home Malware Programs Worms Rorpian

Rorpian

Posted: June 10, 2011

Threat Metric

Threat Level: 5/10
Infected PCs: 124
First Seen: June 10, 2011
Last Seen: January 10, 2022
OS(es) Affected: Windows

Aliases

Net-Worm.Win32.Kolab [Ikarus]Win32:Buterat-CA [GData]Troj/Agent-TBU [Sophos]Trojan.DownLoader4.45388 [DrWeb]Net-Worm.Win32.Kolab.apic [Kaspersky]Win32:Buterat-CA [Trj] [Avast]a variant of Win32/Kryptik.RUR [NOD32]a variant of Win32/Adware.WebEnhancements.A [NOD32]Worm/Win32.Kolab [AhnLab-V3]Trojan.Generic.KD.253379 [BitDefender]Net-Worm.Win32.Kolab.adfc [Kaspersky]Win32:Inject-AIM [Avast]a variant of Win32/Injector.GZY [NOD32]Artemis!B15015913ED2 [McAfee]SHeur3.CEXG [AVG]
More aliases (170)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\Adobee\Protect.exe File name: Protect.exe
Size: 59.9 KB (59904 bytes)
MD5: 4ec61fa056aef27c215ec08fd1b18425
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Adobee
Group: Malware file
Last Updated: June 13, 2011
%WINDIR%\system32\igfxwt32.exe File name: igfxwt32.exe
Size: 172.54 KB (172544 bytes)
MD5: b15015913ed2341f7413a2e3f1717203
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 17, 2011
%WINDIR%\scvhost.exe File name: scvhost.exe
Size: 55.8 KB (55808 bytes)
MD5: 2dff3265278fb6a894829a75f6275c8a
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: August 22, 2011
%WINDIR%\system32\xregew.exe File name: xregew.exe
Size: 18.94 KB (18944 bytes)
MD5: e7ee71d1d54b246eab0a1ff8d01e45b2
Detection count: 20
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 14, 2011
%APPDATA%\SysWin\lsass.exe File name: lsass.exe
Size: 210.94 KB (210944 bytes)
MD5: 2a765aa4b41fc0a0892cd5bd59ea42e9
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SysWin
Group: Malware file
Last Updated: January 10, 2022
%COMMONPROGRAMFILES%\McAfee\SystemCore\mfefire.exe File name: mfefire.exe
Size: 188.13 KB (188136 bytes)
MD5: 760c868d0bb7342f7af2f1262401845c
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %COMMONPROGRAMFILES%\McAfee\SystemCore
Group: Malware file
Last Updated: June 14, 2011
%USERPROFILE%\My Documents\Downloads\XvidSetup.exe File name: XvidSetup.exe
Size: 790.52 KB (790528 bytes)
MD5: c6e5d96ee1f32a92273cbcb37a15999c
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\My Documents\Downloads
Group: Malware file
Last Updated: June 18, 2011
%WINDIR%\advapi32wow.exe File name: advapi32wow.exe
Size: 585.72 KB (585728 bytes)
MD5: b845abcc038ccb9490506e87f53e21a8
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: June 17, 2011
%TEMP%\Ahh.exe File name: Ahh.exe
Size: 59.39 KB (59392 bytes)
MD5: e2743528218828389b5ff627e39b473f
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: June 10, 2011
%ALLUSERSPROFILE%\api-ms-win-core-errorhandling-l1-1-032.dll File name: api-ms-win-core-errorhandling-l1-1-032.dll
Size: 251.39 KB (251392 bytes)
MD5: c0101be52ee8f041bfd337c4ab6251d5
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: June 13, 2011

Related Posts

Loading...