Troj/Spamies-A

Category: Viruses and Spyware Protection available since:05 Apr 2014 16:22:18 (GMT)
Type: Trojan Last Updated:05 Apr 2014 16:22:18 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Spamies-A exhibits the following characteristics:

File Information

Size
244K
SHA-1
2f7b9e10417bcddf9a9666c82d9689ff15efe34d
MD5
e1fe360f7077968558df9a70d7e6f732
CRC-32
40d48e7e
File type
Windows executable
First seen
2007-09-10

Other vendor detection

Avira
TR/Spamies.A.12

Runtime Analysis

Registry Keys Created
  • HKLM\SYSTEM\CurrentControlSet\Services\WPUms\Security
    Security
    □□□@□□□□□□□□□□□□□□@□□□□□□□□□□□ □□□□□□□□□□□ □□@□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□@□□□□□□□□@□□□□□ □□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□□@□□□□□ □□□□□□□□□□□□□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□□□□0□□□□□□□□□□□□□□□□□ □□□□□□□□□□□□□□□□□ □□□□□
  • HKLM\SYSTEM\CurrentControlSet\Services\WPUms\Enum
    NextInstance
    0x00000001
  • HKLM\SYSTEM\CurrentControlSet\Services\WPUms
    ObjectName
    LocalSystem
HTTP Requests
  • http://toporung.in.ua/
DNS Requests
  • arondo.in.ua
  • dufoper.in.ua
  • hotmail.com
  • mail.ru
  • serenaso.in.ua
  • toporung.in.ua

download Try Sophos products for free
Download now