Home Malware Programs Worms Worm.Pushbot.TI

Worm.Pushbot.TI

Posted: March 12, 2013

Threat Metric

Threat Level: 5/10
Infected PCs: 145
First Seen: March 12, 2013
OS(es) Affected: Windows

Aliases

Generic30.IRK [AVG]W32/Blocker.AGAT!tr [Fortinet]Trojan/Win32.Blocker [AhnLab-V3]TR/Agent.901120.17 [AntiVir]Trojan.KillProc.19282 [DrWeb]Trojan-Ransom.Win32.Blocker.agat [Kaspersky]Artemis!792E7300B902 [McAfee]TrojanRansom.Blocker.agat [CAT-QuickHeal]Win32/Cryptor [AVG]W32/Injector.ZVR!tr [Fortinet]Trojan-Ransom.Win32.Foreign [Ikarus]Trojan/Win32.Foreign [AhnLab-V3]Gen:Variant.Symmi.14202 [F-Secure]TrojWare.Win32.Injector.ACID [Comodo]Mal/EncPk-AGD [Sophos]
More aliases (185)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\system32\drivers\vryuthcifuhew.sys File name: vryuthcifuhew.sys
Size: 7.29 KB (7296 bytes)
MD5: 8639036138a51512b1322976931727c9
Detection count: 91
File type: System file
Mime Type: unknown/sys
Path: %WINDIR%\system32\drivers
Group: Malware file
Last Updated: March 13, 2013
%APPDATA%\F360.exe File name: F360.exe
Size: 90.11 KB (90112 bytes)
MD5: b308380ac69259bf614d00a09f8604ec
Detection count: 53
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: March 13, 2013
%ALLUSERSPROFILE%\Datos de programa\ucndBiSChulxK.exe File name: ucndBiSChulxK.exe
Size: 302.59 KB (302592 bytes)
MD5: 628cc95fd323cb45bee36b8bc3d00281
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Datos de programa
Group: Malware file
Last Updated: March 13, 2013
%APPDATA%\HEX-5823-6893-6818\jutched.exe File name: jutched.exe
Size: 86.01 KB (86016 bytes)
MD5: 30cb6b40de97b1bb8b55b19305255b42
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\HEX-5823-6893-6818
Group: Malware file
Last Updated: March 12, 2013
%PROGRAMFILES%\Activity Keylogger\akey.exe File name: akey.exe
Size: 1.22 MB (1229824 bytes)
MD5: 15dd539b58a5a7903ad3a06165baa33e
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Activity Keylogger
Group: Malware file
Last Updated: March 13, 2013
%APPDATA%\457168\457168.exe File name: 457168.exe
Size: 97.28 KB (97280 bytes)
MD5: d2413554d0417598ae0f6e04b3528d16
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\457168
Group: Malware file
Last Updated: March 21, 2013
%PROGRAMFILES%\appcon\appcon.exe File name: appcon.exe
Size: 118.78 KB (118784 bytes)
MD5: 2536658e8864c02235cf479dd4ed7e2e
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\appcon
Group: Malware file
Last Updated: March 13, 2013
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\Jason.exe File name: Jason.exe
Size: 898.49 KB (898491 bytes)
MD5: 792e7300b9023b3ff68716b4b78edd5a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup
Group: Malware file
Last Updated: March 21, 2013
%WINDIR%\ynaqtprz.exe File name: ynaqtprz.exe
Size: 121.85 KB (121856 bytes)
MD5: 4fcf317e0d6ac35dd5252110683c3540
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%
Group: Malware file
Last Updated: March 13, 2013
%LOCALAPPDATA%\Lollipop\tcbhvbb.exe File name: tcbhvbb.exe
Size: 1.2 MB (1205760 bytes)
MD5: a6292383593e42fb7ef53e8e88ad68fc
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Lollipop
Group: Malware file
Last Updated: March 21, 2013
Loading...