Home Malware Programs Trojans Win32/TrojanDownloader.Wauchos.I

Win32/TrojanDownloader.Wauchos.I

Posted: March 15, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 26
First Seen: March 15, 2013
Last Seen: September 4, 2022
OS(es) Affected: Windows

Win32/TrojanDownloader.Wauchos.I is a Trojan that is distributed via malicious emails. The fake email message supposedly comes from the US Electronic Federal Tax Payment System (EFTPS) and targets Taxpayers. The unsolicited email with the title 'EFTPS: Company Tax Payment Batch Has Been Rejected' brings the news that the Federal Tax Payment bearing ID: 6558836841 has become redundant. The Return Reason Code of the affected user is mentioned as R225. However, the identification number that is used in the Company Identification Field is not applicable anywhere. The target user is thus requested to kindly check the information and refer back to Code R966 in order to get more details on the company payment in transaction contacts section coded as 'EFTPS_report_1334022012.pdf' (Adobe PDF). The bogus EFTPS email message also notifies the PC user that the tax payment is due irrespective of the EFTPS online availability. In order to show legitimacy and look genuine to the recipient, the fraudulent email also notifies that 'If its an emergency, you can always make your tax payment by calling the EFTPS'.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



EFTPS_report_1334022012.pdf File name: EFTPS_report_1334022012.pdf
Mime Type: unknown/pdf
Group: Malware file
Loading...