Home Malware Programs Trojans Trojan:Win32/Medfos.X

Trojan:Win32/Medfos.X

Posted: February 4, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 36
First Seen: February 4, 2013
OS(es) Affected: Windows

Trojan:Win32/Medfos.X is a Trojan that is used by attackers to redirect Internet traffic on the infected computer to suspicious or even malicious websites without the affected PC user's permission and knowledge. Trojan:Win32/Medfos.X retrieves information from a remote website, particularly search keywords and websites to reroute the affected computer to unwanted advertising websites which attract PC users to click bogus pop-up ads to earn money from click fraud; this way scammers are able to raise traffic to the doubtful advertisement website. Trojan:Win32/Medfos.X may copy itself to various folders on the compromised PC and also download potentially malicious files there. Trojan:Win32/Medfos.X may also create registry entries to load automatically every time Windows is started. Trojan:Win32/Medfos.X may also strive to disable security-related applications such as anti-virus and firewall programs.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



d0576f56baff10d820644c0052504ddd File name: d0576f56baff10d820644c0052504ddd
Size: 331.77 KB (331776 bytes)
MD5: d0576f56baff10d820644c0052504ddd
Detection count: 55
Group: Malware file
Last Updated: February 11, 2013
e3da92a92a9c7045e82712b677cadea7 File name: e3da92a92a9c7045e82712b677cadea7
Size: 300.54 KB (300544 bytes)
MD5: e3da92a92a9c7045e82712b677cadea7
Detection count: 52
Group: Malware file
Last Updated: February 11, 2013
e9f320b60e13381b9fb5bce25beaeb70 File name: e9f320b60e13381b9fb5bce25beaeb70
Size: 309.76 KB (309760 bytes)
MD5: e9f320b60e13381b9fb5bce25beaeb70
Detection count: 40
Group: Malware file
Last Updated: February 11, 2013
FIDVRPAD.exe File name: FIDVRPAD.exe
Size: 338.43 KB (338432 bytes)
MD5: 0a7eeff9bd257aa48618c013d96700d3
Detection count: 38
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: February 11, 2013
Loading...