Trojan.Danmec

Posted: November 1, 2011

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Threat Level:	8/10
Infected PCs:	297

First Seen:	October 17, 2011
Last Seen:	July 15, 2022
OS(es) Affected:	Windows

The computer threat known as Trojan.Danmec is a seriously dangerous and havoc wrecking Trojan that is capable of severely damaging the computer systems that Trojan.Danmec successfully infiltrates and compromises.

Aliases and Other Mutations of Trojan.Danmec

Several reports have revealed that Trojan.Danmec works under several other aliases, as well as a number of other mutations. You may also be privy to seeing one of the following two mutations of Trojan.Danmec that are known to exist: Trojan.Danmec.A and Trojan.Danmec.gen!E.

Proclivity for Evading Existing Computer Security Software

Trojan.Danmec is a nasty piece of malware that has shown a particular penchant for evading, and even completely disabling existing computer security tools on infected machines. SpywareRemove.com security analysts have reported that Trojan.Danmec has revealed the ability to evade and completely bypass already installed security programs on targeted computers in order to infiltrate and infect them successfully; and once successfully installed onto a targeted computer system, Trojan.Danmec is capable of completely disabling that same security program.

This means that Trojan.Danmec is an especially dangerous computer virus that can, potentially, severely compromise infected systems by opening up serious security vulnerabilities on them. If Trojan.Danmec is able to infect your PC and then disable your entire security system by shutting down your security defenses, this Trojan will leave your machine wide open to further infiltration and infection by other equally harmful computer security violations, such as backdoor, worms and even other Trojans.

A Wide Variety of Symptoms Have Been Linked to Trojan.Danmec

A wide variety of symptoms have been definitively linked to Trojan.Danmec, and they range from causing slow PC performance to expertly injecting additional malware products onto infected computer systems. According to SpywareRemove.com security experts, Trojan.Danmec may also be responsible for unilaterally altering compromised PCs' system settings, injecting its malicious code into various system processes, causing random and unexpected system crashes, dramatically slowing down affected systems' Internet connection and blocking various executable files from launching and/or being able to run.

Trojan.Danmec is also capable of sucking up an enormous amount of resources, invading user privacy, running whatever malicious processes Trojan.Danmec chooses, and immediately crashing all kinds of normal system processes on the computer systems that Trojan.Danmec manages to infect successfully.

In specific terms of Trojan.Danmec's effects on a compromised system's Internet connection, and in addition to seriously slowing compromised systems' Internet connection, Trojan.Danmec is also said to be able to block Internet connection entirely. This malignant computer threat will also, very likely, automatically connect itself to the Internet without the user's authorization to do so.

Additionally, it is crucial to note the fact that Trojan.Danmec has been directly associated to various DOS (Denial of Service) attacks, as well as several mass spamming campaigns that are being led by remote hackers who control computer systems infected by Trojan.Danmec.

Ultimately, Trojan.Danmec works to allow remote hackers easy access to the PCs that Trojan.Danmec infects. If your system is showing clear signs of a Trojan.Danmec infection, this Trojan will open up your system to remote access without your knowledge or permission. Trojan.Danmec does not need your consent to create large holes in your system's security defenses, which will allow anyone with the malicious know-how to remotely access your compromised computer.

This Trojan-based security threat needs to be removed from any affected systems, as soon as its malicious presence is detected. This is not the kind of threat that you want to allow to exist long term on your computer system. If Trojan.Danmec is allowed to remain on an infected system for any lengthy period of time, there is a good chance that this malevolent threat will completely take over all control of that system.

Aliases

Generic25.ALDK [AVG]W32/Malware_fam.NB [Fortinet]TR/Danmec.A.15 [AntiVir]W32/Lethic-F [Sophos]Trojan-Downloader.Win32.Injecter.hce [Kaspersky]Win32:IRCBot-EEH [Trj] [Avast]BackDoor-FAAK!8A49BB07511C [McAfee]Trojan.Danmec [CAT-QuickHeal]BackDoor.Generic14.BLKM [AVG]Trojan-Downloader.Win32.Injecter [Ikarus]Backdoor.Generic.692808 [BitDefender]Trojan-Downloader.Win32.Injecter.hdm [Kaspersky]Win32:AutoRun-CJN [Trj] [Avast]Win32/Lethic.AA [NOD32]BackDoor-FAAK!AB2A590D4D20 [McAfee]
More aliases (134)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

%APPDATA%\Microsoft\Protect\otxw.exe

File name: otxw.exe
Size: 79.87 KB (79872 bytes)
MD5: a7139fde50cb3b89c6d13fc62191bb1a
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Protect
Group: Malware file
Last Updated: October 28, 2011

%WINDIR%\jxdrive32.exe

File name: jxdrive32.exe
Size: 81.92 KB (81920 bytes)
MD5: 7f48ecc7eedd742e033565080c760348
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: July 15, 2022

%SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe

File name: syitm.exe
Size: 49.15 KB (49152 bytes)
MD5: ab2a590d4d203b23211c21c798eeb749
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413
Group: Malware file
Last Updated: July 15, 2022

More files