Trojan.Medfos.A
Posted: October 22, 2012
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Threat Level: | 8/10 |
|---|---|
| Infected PCs: | 466 |
| First Seen: | October 22, 2012 |
|---|---|
| OS(es) Affected: | Windows |
Aliases
Medfos-FAUM!DF1B6ED19158 [McAfee-GW-Edition]Gen:Variant.Symmi.15986 [BitDefender]Trojan.Win32.Midhos.beuy [Kaspersky]Generic32.QBW [AVG]RDN/Generic.tfr!r [McAfee-GW-Edition]TR/Medfos.A.2277 [AntiVir]Trojan.DownLoader8.24307 [DrWeb]Medfos-FAUM!158FC96B9AB9 [McAfee-GW-Edition]Trojan.Win32.Midhos.aoct [Kaspersky]Injector.EUZ [AVG]Virus.Win32.Vundo [Ikarus]Trojan.Win32.Midhos.xer [Kaspersky]Win32:Agent-AQLR [Trj] [Avast]Medfos.bh [McAfee]Trojan.Midhos.xer [CAT-QuickHeal]
More aliases (481)
More aliases (481)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%SystemDrive%\Users\<username>\AppData\Roaming\agsqlc.dll
File name: agsqlc.dllSize: 154.62 KB (154624 bytes)
MD5: ea222eba99f858aec1744f35d93f717c
Detection count: 83
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: March 12, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\wasgi.dll
File name: wasgi.dllSize: 155.13 KB (155136 bytes)
MD5: 2a21256f36dcb8316f81ec5a317c9197
Detection count: 75
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: February 11, 2013
%SystemDrive%\Documents and Settings\branka.juran\Application Data\msizci.dll
File name: msizci.dllSize: 185.85 KB (185856 bytes)
MD5: e66c234538e00bc1c77ca16ffafe5f60
Detection count: 71
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\branka.juran\Application Data
Group: Malware file
Last Updated: January 31, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\tsomr.dll
File name: tsomr.dllSize: 170.49 KB (170496 bytes)
MD5: 04073354af0079f510c824bc0940ebba
Detection count: 64
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: April 16, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\etfgv.dll
File name: etfgv.dllSize: 153.08 KB (153088 bytes)
MD5: 60ae03be0c5f2ce1515cee0d7d84e1d8
Detection count: 64
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: May 1, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\wscmer.dll
File name: wscmer.dllSize: 161.79 KB (161792 bytes)
MD5: f7d38e58e62712bf0c77d2f109c5dd2b
Detection count: 42
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: April 16, 2013
%APPDATA%\dealsi.dll
File name: dealsi.dllSize: 158.72 KB (158720 bytes)
MD5: 1498b93ca2fe76007e06b46dda25eb52
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%
Group: Malware file
Last Updated: March 21, 2013
%SystemDrive%\Documents and Settings\juana.ramirez.SERVER\Datos de programa\mdlshi.dll
File name: mdlshi.dllSize: 165.88 KB (165888 bytes)
MD5: b32ca0d6e59d2c32d2b870c945308691
Detection count: 24
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\juana.ramirez.SERVER\Datos de programa
Group: Malware file
Last Updated: April 8, 2013
%APPDATA%\ronui.dll
File name: ronui.dllSize: 161.28 KB (161280 bytes)
MD5: ba2984ab1a23ed15004481de33669547
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%
Group: Malware file
Last Updated: April 8, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\ethap.dll
File name: ethap.dllSize: 152.57 KB (152576 bytes)
MD5: 87332e80f7543043da9f49361350adcf
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: February 11, 2013
%SystemDrive%\Documents and Settings\Owner\Local Settings\Application Data\cbrpnbtm.exe
File name: cbrpnbtm.exeSize: 178.68 KB (178688 bytes)
MD5: d8ab9a6165fa62530489af70a41b5e93
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Documents and Settings\Owner\Local Settings\Application Data
Group: Malware file
Last Updated: May 13, 2013
%SystemDrive%\Documents and Settings\KURT\Application Data\ostmg.dll
File name: ostmg.dllSize: 166.91 KB (166912 bytes)
MD5: 83ff87c5776ba5197cd9676400f31826
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\KURT\Application Data
Group: Malware file
Last Updated: April 16, 2013
C:\Users\<username>\AppData\Roaming\nepork.dll
File name: nepork.dllSize: 168.44 KB (168448 bytes)
MD5: e72d1a363f9c0bd83ee2f3ac9d41be7a
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: March 4, 2013
%SystemDrive%\Documents and Settings\Owner\Application Data\prerv.dll
File name: prerv.dllSize: 150.52 KB (150528 bytes)
MD5: 338f6378f6b99b2d14f3aa8ed2e4f93f
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\Owner\Application Data
Group: Malware file
Last Updated: March 21, 2013
%SystemDrive%\Documents and Settings\Owner\Application Data\etapev.dll
File name: etapev.dllSize: 176.64 KB (176640 bytes)
MD5: df1b6ed1915881b18f558440db0ad4bd
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\Owner\Application Data
Group: Malware file
Last Updated: May 15, 2013
%USERPROFILE%\Local Settings\Application Data\tutrkcua.exe
File name: tutrkcua.exeSize: 176.64 KB (176640 bytes)
MD5: ced9f5a50bf78eae133f2ee31c4cfff6
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data
Group: Malware file
Last Updated: March 21, 2013
%APPDATA%\bthetx.dll
File name: bthetx.dllSize: 183.29 KB (183296 bytes)
MD5: dd863e7fba895b849e798df08fd67fc0
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %APPDATA%
Group: Malware file
Last Updated: March 29, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\wlapt.dll
File name: wlapt.dllSize: 147.96 KB (147968 bytes)
MD5: 116ee26bec44f6d0154548715446793c
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: March 21, 2013
%SystemDrive%\Documents and Settings\Parkshire Apartments\Application Data\wemsdi.dll
File name: wemsdi.dllSize: 150.01 KB (150016 bytes)
MD5: a7f467b820823cf2e82e9750a58c6896
Detection count: 0
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Documents and Settings\Parkshire Apartments\Application Data
Group: Malware file
Last Updated: April 8, 2013
More files
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.