Home Malware Programs Trojans Vundo.gen!BY

Vundo.gen!BY

Posted: December 16, 2010

Threat Metric

Threat Level: 8/10
Infected PCs: 550
First Seen: December 16, 2010
Last Seen: May 8, 2020
OS(es) Affected: Windows

Aliases

Proxy.AOQA [AVG]W32/Privoxy_based.RP!tr [Fortinet]Win-Trojan/Privoxy-based.434688.H [AhnLab-V3]Trojan.Generic.6239887 [BitDefender]Trojan-Proxy.Win32.Privoxy-based.rp [Kaspersky]Vundo!kk [McAfee]Trojan.Vundo.gen [CAT-QuickHeal]Proxy.AOEX [AVG]W32/Privoxy_based.JS!tr [Fortinet]Win-Trojan/Privoxy-based.435712 [AhnLab-V3]Trojan/Win32.Privoxy-based.gen [Antiy-AVL]TR/Crypt.ZPACK.Gen2 [AntiVir]Trojan.Proxy.20488 [DrWeb]Trojan.Generic.6149768 [BitDefender]Trojan-Proxy.Win32.Privoxy-based.js [Kaspersky]
More aliases (176)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\TEMP\adtqueue.dll File name: adtqueue.dll
Size: 456.19 KB (456192 bytes)
MD5: 1c6c606d461e49b2b1238e9076668ede
Detection count: 95
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\TEMP
Group: Malware file
Last Updated: July 21, 2011
%TEMP%\dtqwyxyxg\jrxqfroyhsn.exe File name: jrxqfroyhsn.exe
Size: 244.22 KB (244224 bytes)
MD5: 835015657ef28e02df2d561cf3674781
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\dtqwyxyxg
Group: Malware file
Last Updated: January 2, 2011
%WINDIR%\system32\bthcache10.dll File name: bthcache10.dll
Size: 435.71 KB (435712 bytes)
MD5: 90e2a358358b1bb01ec14a29777d6ae2
Detection count: 73
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 5, 2011
%WINDIR%\system32\diagprf.dll File name: diagprf.dll
Size: 434.68 KB (434688 bytes)
MD5: 59f4eccee418518a69feb6e76be1361f
Detection count: 68
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 5, 2011
dot3info.dll File name: dot3info.dll
Size: 489.47 KB (489472 bytes)
MD5: ee6a427fe0ffa56299a15477d30b145c
Detection count: 47
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: March 15, 2011
%WINDIR%\system32\mssrv.dll File name: mssrv.dll
Size: 474.11 KB (474112 bytes)
MD5: 0494e9f824b5bb95f437ba5a9b629585
Detection count: 44
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: June 22, 2011
%WINDIR%\system32\commhook.dll File name: commhook.dll
Size: 478.72 KB (478720 bytes)
MD5: bc95e02606bddd0a146a861e909a1a1c
Detection count: 34
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 16, 2011
%APPDATA%\defender.exe File name: defender.exe
Size: 2.26 MB (2268672 bytes)
MD5: 322b42ac31ce7c52c70d3431a1a5907e
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 21, 2010
%APPDATA%\Microsoft\svchost.exe File name: svchost.exe
Size: 97.79 KB (97792 bytes)
MD5: e7271410823db4ece38bd4308d88ea3e
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft
Group: Malware file
Last Updated: December 22, 2010
%TEMP%\QFTgTxhOJr.exe File name: QFTgTxhOJr.exe
Size: 469.5 KB (469504 bytes)
MD5: f2052578a8977f9f804bf3e34ad67c32
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 17, 2010
%TEMP%\lxlQbbDggL.exe File name: lxlQbbDggL.exe
Size: 463.87 KB (463872 bytes)
MD5: 63da13f815a6c3a211111e54d562f55d
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 21, 2010
%APPDATA%\Adobe\AdobeUpdate.exe File name: AdobeUpdate.exe
Size: 52.22 KB (52224 bytes)
MD5: ff2a6593d95ff647d93158971711c66c
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Adobe
Group: Malware file
Last Updated: December 21, 2010
%WINDIR%\nvsvc32.exe File name: nvsvc32.exe
Size: 69.12 KB (69120 bytes)
MD5: 0234ffb2bcf4a3a04a4361eea1865f16
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: December 17, 2010
%APPDATA%\defender.exe File name: defender.exe
Size: 2.27 MB (2274816 bytes)
MD5: 34da6ce44ea314ab45c3f81d9ef6b131
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 21, 2010
%APPDATA%\defender.exe File name: defender.exe
Size: 1.77 MB (1771008 bytes)
MD5: 4ce2644be966e30f7ce8a1a9f0271930
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: December 22, 2010
%USERPROFILE%\Bureau\ComboFix.exe File name: ComboFix.exe
Size: 3.83 MB (3837005 bytes)
MD5: eef540036bb175968ad806f3573515b9
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Bureau
Group: Malware file
Last Updated: November 20, 2019
%APPDATA%\Microsoft\svchost.exe File name: svchost.exe
Size: 98.3 KB (98304 bytes)
MD5: 0719a5e6add7c477f597230c25310b25
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft
Group: Malware file
Last Updated: December 21, 2010
%TEMP%\w32man32.dll File name: w32man32.dll
Size: 477.69 KB (477696 bytes)
MD5: 20264f3ad6aeee3b632aa6fc809c4101
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %TEMP%
Group: Malware file
Last Updated: December 16, 2010
%WINDIR%\system32\comnet.dll File name: comnet.dll
Size: 478.2 KB (478208 bytes)
MD5: 90bd5b87e553c26c7d097c7d9af60b23
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: January 2, 2011
%WINDIR%\TEMP\iepack.dll File name: iepack.dll
Size: 458.24 KB (458240 bytes)
MD5: bde883e0b2b41e6992cce562632f7d82
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\TEMP
Group: Malware file
Last Updated: October 10, 2011
Loading...