Home Malware Programs Trojans Trojan.Meredrop

Trojan.Meredrop

Posted: September 10, 2009

Threat Metric

Ranking: 13,204
Threat Level: 9/10
Infected PCs: 11,692
First Seen: July 24, 2009
Last Seen: August 5, 2023
OS(es) Affected: Windows

Trojan.Meredrop is a Trojan downloader that infiltrates your system under deceptive pretenses, and typically without your knowledge or approval. Once active, however, Trojan.Meredrop downloads additional malware onto your PC and may even open your computer to third party access, compromising personal and financial information.

Aliases

W32.Trojan.Bredolab-2 [ClamAV]Win-Trojan/Fakeav.257536.W [AhnLab-V3]Mal/FakeAV-IG [Sophos]Backdoor.Win32.Bredolab.jrt [Kaspersky]Troj/FakeAV-CKY [Sophos]Trojan.Bredolab-1295 [ClamAV]Adware/KriptyA [Panda]Cryptic.BXV [AVG]Email-Worm.Win32.Hlux [Ikarus]Troj/FakeAV-CKR [Sophos]Email-Worm.Win32.Hlux.h [Kaspersky]Trojan.Bredolab-1294 [ClamAV]Trj/Sinowal.XHV [Panda]Cryptic.BHL [AVG]Trojan-Spy.Win32.Fitmu [Ikarus]
More aliases (5943)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%USERPROFILE%\7652349.dll File name: 7652349.dll
Size: 118.78 KB (118784 bytes)
MD5: f1ed6db2d11fed767d3e9e461bbdaeab
Detection count: 93
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 22, 2013
%ALLUSERSPROFILE%\id73.dat File name: id73.dat
Size: 167.93 KB (167936 bytes)
MD5: 1d9ce566e83187dabf1ac020485aa9ba
Detection count: 85
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\Dane aplikacji\4loae.dat File name: 4loae.dat
Size: 176.12 KB (176128 bytes)
MD5: 3344be084826c22e44ef51cf3d756ea8
Detection count: 82
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Dane aplikacji
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\9lha.dat File name: 9lha.dat
Size: 163.84 KB (163840 bytes)
MD5: 0f0841de6653674b996d363b5dd8b106
Detection count: 75
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe File name: wgsdgsdgdsgsd.exe
Size: 195.07 KB (195072 bytes)
MD5: 9a554f466965efa6ff77922fa2607cff
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\leidner.MIMATIC
Group: Malware file
Last Updated: February 25, 2013
%USERPROFILE%\7664051.dll File name: 7664051.dll
Size: 163.32 KB (163328 bytes)
MD5: 78d1c585d089cef59c34f5d5dd7a211e
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 12, 2013
%ALLUSERSPROFILE%\f9b4.dat File name: f9b4.dat
Size: 142.33 KB (142336 bytes)
MD5: f4d3dbe3c6dcd3920048e955510cd14d
Detection count: 41
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 10, 2013
%ALLUSERSPROFILE%\Anwendungsdaten\niltq.dat File name: niltq.dat
Size: 120.32 KB (120320 bytes)
MD5: de0b8677fa279e1cd19c5be9f9e44588
Detection count: 25
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Anwendungsdaten
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\dodrco.dat File name: dodrco.dat
Size: 125.95 KB (125952 bytes)
MD5: 9c9a779d33aaca2018a5ae38f4fd42ae
Detection count: 22
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 13, 2013
%SystemDrive%\Users\<username>\5180656.dll File name: 5180656.dll
Size: 145.4 KB (145408 bytes)
MD5: fe137dd20dbf553f5ec1dcd8be0b0967
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\David
Group: Malware file
Last Updated: February 22, 2013
%USERPROFILE%\wgsdgsdgdsgsd.exe File name: wgsdgsdgdsgsd.exe
Size: 143.36 KB (143360 bytes)
MD5: fa5480c74bef48c61c4620dc960360c6
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: January 28, 2013
%APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22\svcnost.exe File name: svcnost.exe
Size: 91.99 KB (91995 bytes)
MD5: ef807a16522de3095922c4463891d4f0
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22
Group: Malware file
Last Updated: March 21, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe File name: wgsdgsdgdsgsd.exe
Size: 143.36 KB (143360 bytes)
MD5: bff18411ac6d18a64314698ac6961781
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Adko
Group: Malware file
Last Updated: February 6, 2013
%ALLUSERSPROFILE%\3doco7.dat File name: 3doco7.dat
Size: 92.16 KB (92160 bytes)
MD5: 9c572dcc34be0103269afd38789a8c28
Detection count: 12
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 22, 2013
%ALLUSERSPROFILE%\aetb.dat File name: aetb.dat
Size: 157.69 KB (157696 bytes)
MD5: db08fadc75138074f8a340b3f61dde37
Detection count: 9
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe File name: wgsdgsdgdsgsd.exe
Size: 166.4 KB (166400 bytes)
MD5: 5492c7270d6e70cca8e80dd9e18e3dbf
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Brendan
Group: Malware file
Last Updated: February 6, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe File name: wgsdgsdgdsgsd.exe
Size: 188.92 KB (188928 bytes)
MD5: ce03b45ce97f87a59e64fe953cc63cde
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Martin
Group: Malware file
Last Updated: January 21, 2013
%SystemDrive%\Users\<username>\AppData\Local\Temp\ZPnCEDz.exe File name: ZPnCEDz.exe
Size: 194.56 KB (194560 bytes)
MD5: 948708be6bb72a6da3297841169c7027
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Local\Temp
Group: Malware file
Last Updated: January 29, 2013
C:\Users\<username>\5316589.dll File name: 5316589.dll
Size: 140.8 KB (140800 bytes)
MD5: e98cc2fe2fbaace124c45c186c1db0df
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\Slimline
Group: Malware file
Last Updated: March 6, 2013
%ALLUSERSPROFILE%\vjeri2.dat File name: vjeri2.dat
Size: 130.04 KB (130048 bytes)
MD5: 20ac444e920262677a174ba985fa8585
Detection count: 0
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 8, 2013

More files

One Comment

  • SEAN says:

    this meredrop trojan really sucks! nevermind it took me 2 weeks 2 figure out wat in the heck was going on, but also this trojan does Physical damage to ur pc and or labtop.so 1 250 gb hd and 1 2 gb ddr2 6400 stick later oh & also now 1 of my ddr2 slots r totally erased,persay-inop even to bios,from this freakin thing.I\'ve done everything and I\'m aat my wits end on this.I\'ve tried ext hds usb sticks reloading with win o/s s but it keeps coming back i think it hides in a type of migration file ,somewhere... ugh i\'ve yet to find.but i do have the log/s of it reinstalling it self.u leave this thing on too long n forget ur pc.might as well head 2 the puter shop now,geez.who made this thing? and it gets better, this meredrop,really likes to have a remote controller, mine i\'ve narrowed down to I think,Japan.but who knows.I\'m pretty good with data forenics n security; but like I said I\'m really @ my wits end with this thing and would luv n appreciate HELP, with this PLEASE..

    ty, Sean

    ps-ty very much 4 this page.I\'m trying ur suggestions/procedures now.Plz let me know if any and/or all of my screen shots to mass log files of this darn thing would help any1 else and or me as well.again,ty 4 ur page, n help.

    meredrop, Sux

Loading...