Home Malware Programs Trojans VirTool:MSIL/Obfuscator.L

VirTool:MSIL/Obfuscator.L

Posted: May 10, 2013

Threat Metric

Ranking: 19,434
Threat Level: 8/10
Infected PCs: 1,344
First Seen: May 10, 2013
Last Seen: December 18, 2024
OS(es) Affected: Windows

Aliases

Trojan-Dropper.Win32.Injector.hyha [Kaspersky]W32/Clons.ABES!tr [Fortinet]TR/Symmi.19135.176 [AntiVir]Trojan-Dropper.Win32.Clons.abes [Kaspersky]Artemis!4292F81113CA [McAfee]AdInstaller.InstallQ [AVG]Win32.Malware [Ikarus]ASD.Prevention [AhnLab-V3]InstallQ [Sophos]Adware/InstallIQ.AX [AntiVir]Adware.W3i.9 [DrWeb]Trojan.SuspectCRC [Ikarus]PAK_Generic.001 [TrendMicro]TR/Vipoje.A [AntiVir]PSW.Generic10.GRJ [AVG]
More aliases (227)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



D:\Флешка моя Кингстон 32 МБ Копия 08.02.17 г\Архив ПО, утилит\Реестр - утилиты\Reg Organizer .26 + keigen\rsload.net.Reg.Organizer.6.26.Portable\Reg Organizer 6.x fix + keygen Admin@Crack\msimg32.dll File name: msimg32.dll
Size: 5.12 KB (5120 bytes)
MD5: 78516a84d37a36bcba8932b220cea2db
Detection count: 452
File type: Dynamic link library
Mime Type: unknown/dll
Path: D:\Флешка моя Кингстон 32 МБ Копия 08.02.17 г\Архив ПО, утилит\Реестр - утилиты\Reg Organizer .26 + keigen\rsload.net.Reg.Organizer.6.26.Portable\Reg Organizer 6.x fix + keygen Admin@Crack\msimg32.dll
Group: Malware file
Last Updated: December 18, 2024
%LOCALAPPDATA%\IM Providers\qwninieo.dll File name: qwninieo.dll
Size: 758.78 KB (758784 bytes)
MD5: d27cc1ea4f40fd1ed72fcc7d51166465
Detection count: 96
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\IM Providers
Group: Malware file
Last Updated: May 13, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ppx32.exe File name: ppx32.exe
Size: 8.37 MB (8378716 bytes)
MD5: 776238292f065a3f961d1330e00308d9
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Group: Malware file
Last Updated: May 13, 2013
%LOCALAPPDATA%\Ventrilo\mnnbnrxy.dll File name: mnnbnrxy.dll
Size: 747.52 KB (747520 bytes)
MD5: 4292f81113ca79c16b2200fa8f74d7b2
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\Ventrilo
Group: Malware file
Last Updated: May 13, 2013
%WINDIR%\xwizard(2).exe File name: xwizard(2).exe
Size: 7.57 MB (7578952 bytes)
MD5: dc62dad4af51fdc277c659bd6d31454f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: May 13, 2013
c:\dir\install\install\win32 File name: win32
Size: 341.68 KB (341684 bytes)
MD5: 62a98a0c267dd76098021c9c1a3884fc
Detection count: 9
Path: c:\dir\install\install
Group: Malware file
Last Updated: July 6, 2020
%USERPROFILE%\Downloads\Autorun Virus Remover 3.3 Build 0328 Port\AutorunRemover.exe File name: AutorunRemover.exe
Size: 12.45 MB (12457288 bytes)
MD5: fb426335219e98eb6aef49a1bd9a443b
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Downloads\Autorun Virus Remover 3.3 Build 0328 Port
Group: Malware file
Last Updated: February 24, 2022
%LOCALAPPDATA%\IM Providers\wtdshkzi.dll File name: wtdshkzi.dll
Size: 757.24 KB (757248 bytes)
MD5: 340f24b863ccda10e909079b4a5fc173
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\IM Providers
Group: Malware file
Last Updated: May 13, 2013
%ALLUSERSPROFILE%\Application Data\{7007ACC7-3202-11D1-AAD2-00805FC1270E}\NETSHELL.dll File name: NETSHELL.dll
Size: 996.86 KB (996864 bytes)
MD5: 20e30eda56fb52fbde38d89e8eeb11e8
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\{7007ACC7-3202-11D1-AAD2-00805FC1270E}
Group: Malware file
Last Updated: May 13, 2013
%TEMP%\MsMpEng.exe File name: MsMpEng.exe
Size: 844.28 KB (844288 bytes)
MD5: 4fb1f72ad8cf4fcb835342324a8be94f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 13, 2013
%TEMP%\tmp7800.tmp.exe File name: tmp7800.tmp.exe
Size: 407.04 KB (407040 bytes)
MD5: 0d1eec2dc0c361ad429aa3e2f1bb4af4
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: May 13, 2013
%APPDATA%\Microsoft\Yvikfgb\yvikfgb.exe File name: yvikfgb.exe
Size: 266.24 KB (266240 bytes)
MD5: bf579dc6b595fe76ea303106b8ce982c
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Yvikfgb
Group: Malware file
Last Updated: May 13, 2013
%COMMONPROGRAMFILES%\BOONTY Shared\Service\Boonty.exe File name: Boonty.exe
Size: 69.12 KB (69120 bytes)
MD5: 3beb5277dec75db08367abc467f2b52a
Detection count: 0
File type: Executable File
Mime Type: unknown/exe
Path: %COMMONPROGRAMFILES%\BOONTY Shared\Service
Group: Malware file
Last Updated: May 13, 2013

More files
Loading...