Home Malware Programs Viruses W32.Dupator

W32.Dupator

Posted: February 20, 2007

Threat Metric

Threat Level: 7/10
Infected PCs: 19
First Seen: July 24, 2009
Last Seen: September 19, 2022
OS(es) Affected: Windows

Dupator is a memory-resident, nondestructive virus that is designed to infect the Windows kernel32.dll system file. The virus section in infected files has the "DUPATOR!" name, and this string may be used for manual finding and removing of the infected files. Dupator loads at startup and stays memory resident.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



malware.exe File name: malware.exe
Size: 28.16 KB (28160 bytes)
MD5: eec4aa3e199938efaf12357d569bcdce
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009
C:\$RECYCLE.BIN\S-1-5-21-4212977319-592944543-241785322-1000\$R6F762S\TODOS LOS VIRUS Y HERRAMIENTAS\5 VIRUS WIN\Virus.Win9x.Tenrobot.b File name: Virus.Win9x.Tenrobot.b
Size: 49.15 KB (49152 bytes)
MD5: f16efad07583ce494d4303d618b1591c
Detection count: 9
Mime Type: unknown/b
Path: C:\$RECYCLE.BIN\S-1-5-21-4212977319-592944543-241785322-1000\$R6F762S\TODOS LOS VIRUS Y HERRAMIENTAS\5 VIRUS WIN\Virus.Win9x.Tenrobot.b
Group: Malware file
Last Updated: September 19, 2022
Loading...