Trojan.Meredrop
Posted: September 10, 2009
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
Ranking: | 13,204 |
---|---|
Threat Level: | 9/10 |
Infected PCs: | 11,692 |
First Seen: | July 24, 2009 |
---|---|
Last Seen: | August 5, 2023 |
OS(es) Affected: | Windows |
Trojan.Meredrop is a Trojan downloader that infiltrates your system under deceptive pretenses, and typically without your knowledge or approval. Once active, however, Trojan.Meredrop downloads additional malware onto your PC and may even open your computer to third party access, compromising personal and financial information.
Aliases
W32.Trojan.Bredolab-2 [ClamAV]Win-Trojan/Fakeav.257536.W [AhnLab-V3]Mal/FakeAV-IG [Sophos]Backdoor.Win32.Bredolab.jrt [Kaspersky]Troj/FakeAV-CKY [Sophos]Trojan.Bredolab-1295 [ClamAV]Adware/KriptyA [Panda]Cryptic.BXV [AVG]Email-Worm.Win32.Hlux [Ikarus]Troj/FakeAV-CKR [Sophos]Email-Worm.Win32.Hlux.h [Kaspersky]Trojan.Bredolab-1294 [ClamAV]Trj/Sinowal.XHV [Panda]Cryptic.BHL [AVG]Trojan-Spy.Win32.Fitmu [Ikarus]
More aliases (5943)
More aliases (5943)
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%USERPROFILE%\7652349.dll
File name: 7652349.dllSize: 118.78 KB (118784 bytes)
MD5: f1ed6db2d11fed767d3e9e461bbdaeab
Detection count: 93
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 22, 2013
%ALLUSERSPROFILE%\id73.dat
File name: id73.datSize: 167.93 KB (167936 bytes)
MD5: 1d9ce566e83187dabf1ac020485aa9ba
Detection count: 85
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\Dane aplikacji\4loae.dat
File name: 4loae.datSize: 176.12 KB (176128 bytes)
MD5: 3344be084826c22e44ef51cf3d756ea8
Detection count: 82
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Dane aplikacji
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\9lha.dat
File name: 9lha.datSize: 163.84 KB (163840 bytes)
MD5: 0f0841de6653674b996d363b5dd8b106
Detection count: 75
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe
File name: wgsdgsdgdsgsd.exeSize: 195.07 KB (195072 bytes)
MD5: 9a554f466965efa6ff77922fa2607cff
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\leidner.MIMATIC
Group: Malware file
Last Updated: February 25, 2013
%USERPROFILE%\7664051.dll
File name: 7664051.dllSize: 163.32 KB (163328 bytes)
MD5: 78d1c585d089cef59c34f5d5dd7a211e
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%
Group: Malware file
Last Updated: February 12, 2013
%ALLUSERSPROFILE%\f9b4.dat
File name: f9b4.datSize: 142.33 KB (142336 bytes)
MD5: f4d3dbe3c6dcd3920048e955510cd14d
Detection count: 41
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 10, 2013
%ALLUSERSPROFILE%\Anwendungsdaten\niltq.dat
File name: niltq.datSize: 120.32 KB (120320 bytes)
MD5: de0b8677fa279e1cd19c5be9f9e44588
Detection count: 25
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%\Anwendungsdaten
Group: Malware file
Last Updated: May 8, 2013
%ALLUSERSPROFILE%\dodrco.dat
File name: dodrco.datSize: 125.95 KB (125952 bytes)
MD5: 9c9a779d33aaca2018a5ae38f4fd42ae
Detection count: 22
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: May 13, 2013
%SystemDrive%\Users\<username>\5180656.dll
File name: 5180656.dllSize: 145.4 KB (145408 bytes)
MD5: fe137dd20dbf553f5ec1dcd8be0b0967
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %SystemDrive%\Users\David
Group: Malware file
Last Updated: February 22, 2013
%USERPROFILE%\wgsdgsdgdsgsd.exe
File name: wgsdgsdgdsgsd.exeSize: 143.36 KB (143360 bytes)
MD5: fa5480c74bef48c61c4620dc960360c6
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%
Group: Malware file
Last Updated: January 28, 2013
%APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22\svcnost.exe
File name: svcnost.exeSize: 91.99 KB (91995 bytes)
MD5: ef807a16522de3095922c4463891d4f0
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\xnnvqzixvuyshvvkitpxxms1waqakxb22
Group: Malware file
Last Updated: March 21, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe
File name: wgsdgsdgdsgsd.exeSize: 143.36 KB (143360 bytes)
MD5: bff18411ac6d18a64314698ac6961781
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Adko
Group: Malware file
Last Updated: February 6, 2013
%ALLUSERSPROFILE%\3doco7.dat
File name: 3doco7.datSize: 92.16 KB (92160 bytes)
MD5: 9c572dcc34be0103269afd38789a8c28
Detection count: 12
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 22, 2013
%ALLUSERSPROFILE%\aetb.dat
File name: aetb.datSize: 157.69 KB (157696 bytes)
MD5: db08fadc75138074f8a340b3f61dde37
Detection count: 9
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe
File name: wgsdgsdgdsgsd.exeSize: 166.4 KB (166400 bytes)
MD5: 5492c7270d6e70cca8e80dd9e18e3dbf
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Brendan
Group: Malware file
Last Updated: February 6, 2013
%SystemDrive%\Users\<username>\wgsdgsdgdsgsd.exe
File name: wgsdgsdgdsgsd.exeSize: 188.92 KB (188928 bytes)
MD5: ce03b45ce97f87a59e64fe953cc63cde
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\Martin
Group: Malware file
Last Updated: January 21, 2013
%SystemDrive%\Users\<username>\AppData\Local\Temp\ZPnCEDz.exe
File name: ZPnCEDz.exeSize: 194.56 KB (194560 bytes)
MD5: 948708be6bb72a6da3297841169c7027
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Local\Temp
Group: Malware file
Last Updated: January 29, 2013
C:\Users\<username>\5316589.dll
File name: 5316589.dllSize: 140.8 KB (140800 bytes)
MD5: e98cc2fe2fbaace124c45c186c1db0df
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Users\Slimline
Group: Malware file
Last Updated: March 6, 2013
%ALLUSERSPROFILE%\vjeri2.dat
File name: vjeri2.datSize: 130.04 KB (130048 bytes)
MD5: 20ac444e920262677a174ba985fa8585
Detection count: 0
File type: Data file
Mime Type: unknown/dat
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: April 8, 2013
More files
this meredrop trojan really sucks! nevermind it took me 2 weeks 2 figure out wat in the heck was going on, but also this trojan does Physical damage to ur pc and or labtop.so 1 250 gb hd and 1 2 gb ddr2 6400 stick later oh & also now 1 of my ddr2 slots r totally erased,persay-inop even to bios,from this freakin thing.I\'ve done everything and I\'m aat my wits end on this.I\'ve tried ext hds usb sticks reloading with win o/s s but it keeps coming back i think it hides in a type of migration file ,somewhere... ugh i\'ve yet to find.but i do have the log/s of it reinstalling it self.u leave this thing on too long n forget ur pc.might as well head 2 the puter shop now,geez.who made this thing? and it gets better, this meredrop,really likes to have a remote controller, mine i\'ve narrowed down to I think,Japan.but who knows.I\'m pretty good with data forenics n security; but like I said I\'m really @ my wits end with this thing and would luv n appreciate HELP, with this PLEASE..
ty, Sean
ps-ty very much 4 this page.I\'m trying ur suggestions/procedures now.Plz let me know if any and/or all of my screen shots to mass log files of this darn thing would help any1 else and or me as well.again,ty 4 ur page, n help.
meredrop, Sux