Trojan.Meredrop
Posted: September 10, 2009
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Threat Level: | 9/10 |
|---|---|
| Infected PCs: | 11,741 |
| First Seen: | July 24, 2009 |
|---|---|
| Last Seen: | September 21, 2024 |
| OS(es) Affected: | Windows |
Trojan.Meredrop is a Trojan downloader that infiltrates your system under deceptive pretenses, and typically without your knowledge or approval. Once active, however, Trojan.Meredrop downloads additional malware onto your PC and may even open your computer to third party access, compromising personal and financial information.
Aliases
W32.Trojan.Bredolab-2 [ClamAV]Win-Trojan/Fakeav.257536.W [AhnLab-V3]Mal/FakeAV-IG [Sophos]Backdoor.Win32.Bredolab.jrt [Kaspersky]Troj/FakeAV-CKY [Sophos]Trojan.Bredolab-1295 [ClamAV]Adware/KriptyA [Panda]Cryptic.BXV [AVG]Email-Worm.Win32.Hlux [Ikarus]Troj/FakeAV-CKR [Sophos]Email-Worm.Win32.Hlux.h [Kaspersky]Trojan.Bredolab-1294 [ClamAV]Trj/Sinowal.XHV [Panda]Cryptic.BHL [AVG]Trojan-Spy.Win32.Fitmu [Ikarus]
More aliases (5943)
More aliases (5943)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:C:\Users\<username>\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\2c1e7421-19a92b55
File name: 2c1e7421-19a92b55Size: 212.48 KB (212480 bytes)
MD5: 5457e57f7fb70bccef313fe0ef161661
Detection count: 103
Path: C:\Users\<username>\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\2c1e7421-19a92b55
Group: Malware file
Last Updated: August 27, 2022
%USERPROFILE%\7652349.dll
File name: 7652349.dllSize: 118.78 KB (118784 bytes)
MD5: f1ed6db2d11fed767d3e9e461bbdaeab
Detection count: 93
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 22, 2013
%USERPROFILE%\awt43abr.dll
File name: awt43abr.dllSize: 206.2 KB (206200 bytes)
MD5: cff4adf3b8a36fdbd1f10644674cd565
Detection count: 91
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: January 5, 2013
%ALLUSERSPROFILE%\id73.dat
File name: id73.datSize: 167.93 KB (167936 bytes)
MD5: 1d9ce566e83187dabf1ac020485aa9ba
Detection count: 85
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\Dane aplikacji\4loae.dat
File name: 4loae.datSize: 176.12 KB (176128 bytes)
MD5: 3344be084826c22e44ef51cf3d756ea8
Detection count: 82
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Dane aplikacji
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\9lha.dat
File name: 9lha.datSize: 163.84 KB (163840 bytes)
MD5: 0f0841de6653674b996d363b5dd8b106
Detection count: 75
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%USERPROFILE%\wgsdgsdgdsgsd.dll
File name: wgsdgsdgdsgsd.dllSize: 256 KB (256000 bytes)
MD5: fdaad1c18412adadb4138afc53e8843a
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: January 14, 2013
%USERPROFILE%\7664051.dll
File name: 7664051.dllSize: 163.32 KB (163328 bytes)
MD5: 78d1c585d089cef59c34f5d5dd7a211e
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 12, 2013
%ALLUSERSPROFILE%\f9b4.dat
File name: f9b4.datSize: 142.33 KB (142336 bytes)
MD5: f4d3dbe3c6dcd3920048e955510cd14d
Detection count: 41
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 10, 2013
%ALLUSERSPROFILE%\Anwendungsdaten\niltq.dat
File name: niltq.datSize: 120.32 KB (120320 bytes)
MD5: de0b8677fa279e1cd19c5be9f9e44588
Detection count: 25
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Anwendungsdaten
Group: Malware file
Last Updated: May 8, 2013
%APPDATA%\WinDoctorX_v.3.05.exe
File name: WinDoctorX_v.3.05.exeSize: 282.09 KB (282096 bytes)
MD5: 7f1ffe1e2a0db1d2fbb0f9f42fa4759e
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: April 8, 2013
%ALLUSERSPROFILE%\dodrco.dat
File name: dodrco.datSize: 125.95 KB (125952 bytes)
MD5: 9c9a779d33aaca2018a5ae38f4fd42ae
Detection count: 22
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 13, 2013
%SystemDrive%\Users\<username>\5180656.dll
File name: 5180656.dllSize: 145.4 KB (145408 bytes)
MD5: fe137dd20dbf553f5ec1dcd8be0b0967
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\David
Group: Malware file
Last Updated: February 22, 2013
%APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22\svcnost.exe
File name: svcnost.exeSize: 91.99 KB (91995 bytes)
MD5: ef807a16522de3095922c4463891d4f0
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22
Group: Malware file
Last Updated: March 21, 2013
%ALLUSERSPROFILE%\3doco7.dat
File name: 3doco7.datSize: 92.16 KB (92160 bytes)
MD5: 9c572dcc34be0103269afd38789a8c28
Detection count: 12
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 22, 2013
%ALLUSERSPROFILE%\aetb.dat
File name: aetb.datSize: 157.69 KB (157696 bytes)
MD5: db08fadc75138074f8a340b3f61dde37
Detection count: 9
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\AppData\Local\Temp\ZPnCEDz.exe
File name: ZPnCEDz.exeSize: 194.56 KB (194560 bytes)
MD5: 948708be6bb72a6da3297841169c7027
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Local\Temp
Group: Malware file
Last Updated: January 29, 2013
C:\Users\<username>\5316589.dll
File name: 5316589.dllSize: 140.8 KB (140800 bytes)
MD5: e98cc2fe2fbaace124c45c186c1db0df
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\Slimline
Group: Malware file
Last Updated: March 6, 2013
%ALLUSERSPROFILE%\vjeri2.dat
File name: vjeri2.datSize: 130.04 KB (130048 bytes)
MD5: 20ac444e920262677a174ba985fa8585
Detection count: 0
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 8, 2013
More files
this meredrop trojan really sucks! nevermind it took me 2 weeks 2 figure out wat in the heck was going on, but also this trojan does Physical damage to ur pc and or labtop.so 1 250 gb hd and 1 2 gb ddr2 6400 stick later oh & also now 1 of my ddr2 slots r totally erased,persay-inop even to bios,from this freakin thing.I\'ve done everything and I\'m aat my wits end on this.I\'ve tried ext hds usb sticks reloading with win o/s s but it keeps coming back i think it hides in a type of migration file ,somewhere... ugh i\'ve yet to find.but i do have the log/s of it reinstalling it self.u leave this thing on too long n forget ur pc.might as well head 2 the puter shop now,geez.who made this thing? and it gets better, this meredrop,really likes to have a remote controller, mine i\'ve narrowed down to I think,Japan.but who knows.I\'m pretty good with data forenics n security; but like I said I\'m really @ my wits end with this thing and would luv n appreciate HELP, with this PLEASE..
ty, Sean
ps-ty very much 4 this page.I\'m trying ur suggestions/procedures now.Plz let me know if any and/or all of my screen shots to mass log files of this darn thing would help any1 else and or me as well.again,ty 4 ur page, n help.
meredrop, Sux