Home Malware Programs Trojans TrojanDropper:Win32/Injector.I

TrojanDropper:Win32/Injector.I

Posted: November 9, 2010

Threat Metric

Threat Level: 8/10
Infected PCs: 2,462
First Seen: November 30, 2010
OS(es) Affected: Windows

TrojanDropper:Win32/Injector.I (or Mal/Rimecud-E) is a malicious backdoor Trojan horse that runs in the background and allows remote access to the compromised system. Mal/Rimecud-E attempts to propagate by exploiting local network shares. TrojanDropper:Win32/Injector.I will also attempt to join a predefined IRC server to channel stolen data or participate in distributed denial-of-service (DDoS) attacks. The DDoS attacks will attempt to make the computer unavailable to its intended users. It is recommended that Mal/Rimecud-E be removed with a reliable anti-spyware application.

TrojanDropper:Win32/Injector.I

Aliases

Worm/Generic.BSCB [AVG]Win32/Palevo.Worm.81920 [AhnLab-V3]Win32/Rimecud.BPZ [eTrust-Vet]Heuristic.BehavesLike.Win32.Suspicious.D [McAfee-GW-Edition]Worm/Palevo.EV [AntiVir]Trojan.DownLoader1.18748 [DrWeb]W32/Palevo-AF [Sophos]Trojan.Flooder.YAX [BitDefender]P2P-Worm.Win32.Palevo.auua [Kaspersky]Worm.Palevo-14371 [ClamAV]Worm/Generic.BTAO [AVG]Win-Trojan/Malware.81920.BT [AhnLab-V3]Win32/Rimecud.BEW [eTrust-Vet]Heuristic.BehavesLike.Win32.AdSpyware.D [McAfee-GW-Edition]Worm/Autorun.EH [AntiVir]
More aliases (583)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe File name: vsbntlo.exe
Size: 24.57 KB (24576 bytes)
MD5: bfec4095340a4e986e0f41103a60dbdf
Detection count: 227
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811
Group: Malware file
Last Updated: January 19, 2011
%TEMP%\3980517.exe File name: 3980517.exe
Size: 45.05 KB (45056 bytes)
MD5: 324a506a5b2398d36614a6bc33eaca7a
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 28, 2010
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1456\budau44.exe File name: budau44.exe
Size: 24.57 KB (24576 bytes)
MD5: 9db0f5f3b0d04003583e90ecd2e579ee
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1456
Group: Malware file
Last Updated: December 1, 2010
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\psyu44.exe File name: psyu44.exe
Size: 24.57 KB (24576 bytes)
MD5: 7e58f32364b86216f78c43d6a46af454
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455
Group: Malware file
Last Updated: December 1, 2010
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\gpp3g.exe File name: gpp3g.exe
Size: 24.57 KB (24576 bytes)
MD5: cba39fb57dd59756fc80ea9d092a71de
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455
Group: Malware file
Last Updated: December 1, 2010
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\psysnew.exe File name: psysnew.exe
Size: 24.57 KB (24576 bytes)
MD5: b9f7c19181b4d905a5a8c15cd56352b3
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455
Group: Malware file
Last Updated: November 30, 2010
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\fresdg.exe File name: fresdg.exe
Size: 24.57 KB (24576 bytes)
MD5: dfbc52cf46641ceb4a01b23fc6e58dbd
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455
Group: Malware file
Last Updated: January 18, 2011
%TEMP%\1446318.exe File name: 1446318.exe
Size: 45.05 KB (45056 bytes)
MD5: df7bf88f0582830f1081bd52b12b31ce
Detection count: 35
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: July 13, 2011
C:\RECYCLER\S-1-5-21-4834969665-1630205464-494378783-4548\syscr.exe File name: syscr.exe
Size: 81.92 KB (81920 bytes)
MD5: 64b5cdedee36113e73c3e5b94458acb6
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-4834969665-1630205464-494378783-4548
Group: Malware file
Last Updated: October 13, 2011
C:\inetserver.exe File name: inetserver.exe
Size: 184.32 KB (184320 bytes)
MD5: d33f79b2b4f5179e752489341bbb2db6
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: C:\inetserver.exe
Group: Malware file
Last Updated: June 2, 2011
C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455\psyjo32.exe File name: psyjo32.exe
Size: 24.57 KB (24576 bytes)
MD5: 4cd28447e370c8fbdadf88e78c5c8fb5
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1455
Group: Malware file
Last Updated: February 23, 2011
%TEMP%\439010.exe File name: 439010.exe
Size: 45.05 KB (45056 bytes)
MD5: 7728e5415061b3c182c555b50f2e578f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: November 30, 2010

More files
Loading...