Home Malware Programs Worms Worm.Rimecud.FR

Worm.Rimecud.FR

Posted: October 15, 2012

Threat Metric

Threat Level: 5/10
Infected PCs: 379
First Seen: October 15, 2012
Last Seen: November 27, 2021
OS(es) Affected: Windows

Aliases

SHeur3.XJU [AVG]Trojan.Win32.SuspectCRC [Ikarus]Worm/Win32.Palevo.gen [Antiy-AVL]TR/Dropper.Gen [AntiVir]Trojan.Inject.48602 [DrWeb]Gen:Trojan.Heur.RP.Ry0aauU5WFaj [BitDefender]P2P-Worm.Win32.Palevo.bxww [Kaspersky]Generic.dx!wlj [McAfee]Application/MyWebSearch [Panda]Riskware/WebSearch [Fortinet]Win-Trojan/Mywebsearch.28672 [AhnLab-V3]AdWare/ToolBar.MyWebSearch.gen [Antiy-AVL]Adware.Mywebsearch-2 [ClamAV]Win32.PluginWebSearc [eSafe]Win32:Mywebsearch-R [PUP] [Avast]
More aliases (177)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSOEMON.EXE File name: MWSOEMON.EXE
Size: 28.67 KB (28672 bytes)
MD5: a1f69bdc00f9e7b58b4b7ad885d7990f
Detection count: 98
File type: Executable File
Mime Type: unknown/EXE
Path: C:\Program Files (x86)\MyWebSearch\bar\2.bin\MWSOEMON.EXE
Group: Malware file
Last Updated: December 7, 2022
%APPDATA%\Microsoft\Windows\msshell.exe File name: msshell.exe
Size: 18.43 KB (18432 bytes)
MD5: 555c4deeb6682951f69c1a16aeb07b31
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows
Group: Malware file
Last Updated: October 17, 2012
%PROGRAMFILES%\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL File name: MWSSRCAS.DLL
Size: 61.44 KB (61440 bytes)
MD5: aa1744c89831de5c46fc8395efa3f2a2
Detection count: 37
File type: Dynamic link library
Mime Type: unknown/DLL
Path: %PROGRAMFILES%\MyWebSearch\SrchAstt\2.bin
Group: Malware file
Last Updated: February 10, 2020
%PROGRAMFILES(x86)%\Mp3Tube Toolbar\Mp3TubeSvc.exe File name: Mp3TubeSvc.exe
Size: 259.84 KB (259848 bytes)
MD5: eb522a2c0c9ae0df2092538b1fcda996
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Mp3Tube Toolbar
Group: Malware file
Last Updated: January 21, 2020
C:\Users\<username>\Desktop\ENCICLOPEDIA\Cine, Musica y PowerPoint\POWERPOINT\z devolver\ArhipelagGulag.rar_2458118_70_vip1.exe File name: ArhipelagGulag.rar_2458118_70_vip1.exe
Size: 508.21 KB (508210 bytes)
MD5: 1929fa0f8d9830650af1df0726b2f3fa
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Desktop\ENCICLOPEDIA\Cine, Musica y PowerPoint\POWERPOINT\z devolver\ArhipelagGulag.rar_2458118_70_vip1.exe
Group: Malware file
Last Updated: October 11, 2022
C:\RECYCLER\S-1-5-21-2575505653-7720469905-900448916-7208\recycle.exe File name: recycle.exe
Size: 719.36 KB (719360 bytes)
MD5: d83751cef15bad7ca910e7985310acac
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-2575505653-7720469905-900448916-7208
Group: Malware file
Last Updated: October 15, 2012
%PROGRAMFILES%\STARtools\StarMemo\StarMemoup.exe File name: StarMemoup.exe
Size: 221.18 KB (221184 bytes)
MD5: a134733e781b7d01768fff7406fb2dd6
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\STARtools\StarMemo
Group: Malware file
Last Updated: July 10, 2020
C:\RECYCLER\S-1-5-21-3087941426-9024873072-735826462-7831\recycle.exe File name: recycle.exe
Size: 706.56 KB (706560 bytes)
MD5: 3d36f69c73ef9961f681df5f2caa6268
Detection count: 6
File type: Executable File
Mime Type: unknown/exe
Path: C:\RECYCLER\S-1-5-21-3087941426-9024873072-735826462-7831
Group: Malware file
Last Updated: November 6, 2012
%LOCALAPPDATA%\Apple\Adobe\jguai.dll File name: jguai.dll
Size: 215.55 KB (215552 bytes)
MD5: 3857b3b914ea9adc519471b8914d68c6
Detection count: 2
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\Apple\Adobe
Group: Malware file
Last Updated: October 17, 2012
Loading...