SiaPort.exe sample submitted on 2012-01-28 and identified as a threat.
Alias:
Threat File:SiaPort.exe
Submit time:2012-01-28
Excute time:5 min 13 sec
Level of Spread:5
Level of Threat:5
type:Win32/Sality
Filesize:73K Bytes
0K Bytes
1K Bytes
Files type
SiaPort.exe is Windows exe file.
MD5:tPw6cfVa517nFayuU58bJN7HxdcO4BAU
24fc2ae3c49.exe; 24fc2ae3079.exe; tmsysr.exe; 000.exe; eli_548.exe; eli_303.exe; eli_175.exe; 1313226317496.exe; 131322631612468.exe; gvtktq.exe; ichyhg.exe; gpdsdy.exe; wincxdnht.exe; rnncfy.exe; streams.exe; mturoute.exe; kav8.0.0.506br.exe; aegvvp.exe; MOBSSYNCC.EXE; jashla.exe; Edxaxe.exe; aegvvp.exe; Io.vbs; 22CC6C32.exe; msnlmsgrsn.exe; Grfsfy.exe; runAPI79.exe; Scxaxs.exe; rubarbroker.exe; rubar.dll; winlogon_47.exe; vgtbs.sys; network.exe; fgths.sys; autokms.exe; wwpkodl.exe; vrvkhms.exe; vjuqrdc.exe; sgjldl.exe; mhtvdha.exe; jorvvo.exe; ggrdoe.exe; eetdmcs.exe; dynupgo.exe; dgwnood.exe; deosee.exe; akibpx.exe; ttms829.dll.vbs; stc.exe;
qjon.exe is a trojan file and you’d better remove this threat file.
qjon.exe sample submitted on 2011-03-12 and identified as a threat.
Alias:
Threat File:qjon.exe
Submit time:2011-03-12
Excute time:9 min 45 sec
Level of Spread:4
Level of Threat:6
type: Generic10
Filesize: 74K Bytes
Files type
qjon.exe is Windows exe file.
MD5:7h2ttoU6YuKowIrevPh0BV7r8C35X30L
uzot.exe; opevi.exe; okzyw.exe; javara.exe; fglcrpow.sys; ejasozoq.dll; cahfwmv.dll; auupemmc.exe; otakuhoxaj.dll; hued.exe; dwm.exe; rgcf.exe; sesdessecetra.exe; roqyxd.exe; porx.exe; nsvb.exe; mtlat.exe; mb9a.exe; lucro.exe; i00dvoym.exe; ciaxxxxxxx.exe; atidljskdfina.exe; 1tmpup.exe; egsy.exe; 1051tcpiexplorer.exe; y7931i.exe; y31oc3s7e.exe; w79y1c.exe; uo93m7.exe; sku1793.exe; s93sk9y.exe; qgm79wsk9.exe; q79c1s.exe; q1793myw.exe; myws1e.exe; my5ce.exe; liveupdate360_770_.exe; kuocei7q.exe; kuo7o3o7o.exe; ku7my1ce.exe; k9y1cei.exe; iqg9i1qg.exe; i3qgm3g7i.exe; i3qgm317c.exe; e9a1k9y.exe; e1a93179.exe; aa7k3y7c.exe; a1k9y1ce.exe; 931u9my7c.exe;
mghkoqds.exe; taskcore.exe; svctask.exe; nteagle.exe; mvurest.exe; browseaviruntime.dll; bldjad.exe; 5031e3b8.exe; ew1.exe; ew1 .exe; ojulejariv.dll; ilapilap.dll; lpbvlxktssd.exe; d544th7b.exe; gf302yvm.exe; pxtdapow.sys; kwdoapoc.sys; pxtdapow.sys; kgdoypob.sys; 65044239.exe; 50giplg8.exe; c.exe; b.exe; xcv.exe; xcs.exe; ycx.exe; 269156238wsy.dll; 09lf.exe; herss.exe; dsoqq.exe; cvasds0.dll; ubirg.exe; herss.exe; dsoqq.exe; cvasds0.dll; kjx.exe; 1.tmp.exe; tx1.exe; SM345d.exe; svchosts.exe; kwwalpgr.sys; pwtdapoc.sys; utx.exe; mcupdate_1277390027.exe; pxtdqpod.sys; xg03mhgo.exe; nu0×1i5.exe; wkd.exe; wkb.exe;
Threat Name: downloader.win32.agent.dbih, it attempts to download and install other malware onto the affected system. it is a win32 downloader threat.
Spread Method:
Instant Message(MSN,Gtalk,QQ etc.)
Threat type:downloader.win32
downloader.win32.agent.dbih first detected:2010-02-27
Virus file known is PE EXE file written in Java
File Size:607K Bytes.
Behavior:Copies files to the Windows system directory
Level of Spread:6
Level of Threat:2
Reported Path:Unkonow path
MD5:B5M007CXFbqu1o830v4Ihc182JR7ePGs
SHA1..:JVu32Ddfn36vL52S38Vpp1KGNraD4xo6rE7QQL44
pwldyaog.sys; awryaaod.sys; uwrciuog.sys; pxldypog.sys; kwloifow.sys; uwliauog.sys; rjvjlsvw.exe; evx.exe; hjh.exe; herss.exe; zfh.exe; ofcxmhyutmtcxmdzhqhe.exe; kxh.exe; hvphtlzsoeiogsgze.exe; dvtpfbtqqkscyogdmwomi.exe; angxizmezorwnyld.exe; rjvjlsvw.exe; iqgfypvt.exe; psd.exe; rjvjlsvw.exe; rjvjlsvw.exe; rjvjlsvw.exe; hkd.exe; herss.exe; herss.exe; kkd.exe; xaiexa.exe; viuzao.exe; glb1a2b.exe; w8e047.exe; rjvjlsvw.exe; prdmed.exe; winpmdwj.exe; windjll.exe; fjuxal.exe; evx.exe; degukpy.exe; 711.exe; 589.exe; 153.exe; winxqlhp.exe; winacbt.exe; hjh.exe; winsgcl.exe; cxr.exe; 550.exe; zfh.exe; kxh.exe; soundnormalizer.tmp;
Threat Name: Trojan.Win32.Pincav.plf
Spread Method:
Network Spread
Threat type:Trojan.Win32
Trojan.Win32.Pincav.plf first detected:2010-01-30
Virus file known is PE EXE file written in Dephi
File Size:20K Bytes.
Behavior:Copies files to the Windows system directory
Level of Spread:6
Level of Threat:1
Reported Path:Unkonow path
MD5:De4diLhB28WYNGMwT7Cu0CyRY3opfxEn
SHA1..:k1Tl3s3jPBfhvou1c7K10k0aHR78ngm76Nb6R0Q3
ubrrlf.exe is considered unsafe as threat.
ubrrlf.exe is a win32.x virus
ubrrlf.exe may change your file and register.
OScope.Trojan.BagsWay.D virus file known as tp_map16.int2 and oghewfae.exe virus File Size : 704000 byte