TechSpot

[Active] "12.exe" Virus Found

By mokshabhii
Oct 11, 2010
  1. The file "12.exe" is known to be created under the following filenames:
    %AllUsersProfile%\cncdown.exe
    %AppData%\1.exe
    %AppData%\blaah.exe
    %AppData%\calc.exe
    %AppData%\codecsetup.exe
    %AppData%\codecsetup3788.exe
    %AppData%\codecsetup4127.exe
    %AppData%\codecsetup6400.exe
    %AppData%\codecsetup8536.exe
    %AppData%\cp_setup_assist.exe
    %AppData%\cuda.exe
    %AppData%\dealassistant\dauninstall.exe
    %AppData%\digifast\dfuninstall.exe
    %AppData%\hose.exe
    %AppData%\ijango_toolbar_installer.exe
    %AppData%\ldr.exe
    %AppData%\microsoft\dtsc\t.exe
    %AppData%\microsoft\office71\vhchk.exe
    %AppData%\microsoft\windows\ernsjyi.exe
    %AppData%\microsoft\windows\jjcmdrj.exe
    %AppData%\microsoft\windows\nheste.exe
    %AppData%\microsoft\windows\nxmwp.exe
    %AppData%\microsoft\windows\rwmgh.exe
    %AppData%\microsoft\windows\security\user0.exe
    %AppData%\microsoft\windows\tbljxjk.exe
    %AppData%\microsoft\windows\vohth.exe
    %AppData%\microsoft\windows\vvpmyvaw.exe
    %AppData%\mxplay\temp\mxplay_installer.exe
    %AppData%\ntcom.dll
    %AppData%\nthead.dll
    %AppData%\pak-5593.exe
    %AppData%\pak-5594.exe
    %AppData%\pak-5595.exe
    %AppData%\pak-5596.exe
    %AppData%\pak-5597.exe
    %AppData%\pak-5598.exe
    %AppData%\pak-5599.exe
    %AppData%\pak-5600.exe
    %AppData%\pak-5601.exe
    %AppData%\pak-5602.exe
    %AppData%\pak-5603.exe
    %AppData%\salehoo\auctionalert\_tmp\aa.exe
    %AppData%\salehoo\salehooalert\_tmp\aa.exe
    %AppData%\scvhost.exe
    %AppData%\silverlight\silverlight.exe
    %AppData%\skynet\muonline\_cw0srv.exe
    %AppData%\skynet\muonline\234672.exe
    %AppData%\skynet\muonline\239874.exe
    %AppData%\skynet\muonline\293874.exe
    %AppData%\skynet\muonline\345674.exe
    %AppData%\skynet\muonline\345676.exe
    %AppData%\skynet\muonline\435627.exe
    %AppData%\skynet\muonline\543978.exe
    %AppData%\skynet\muonline\546783.exe
    %AppData%\speedrunner\sruninstall.exe
    %AppData%\temp.dll
    %AppData%\truesword4.exe
    %AppData%\wefisetup.exe
    %AppData%\winbutler\winbuninstaller.exe
    %AppData%\winbutler\winbutler.exe
    %AppData%\windows.exe
    %AppData%\wintouch\wintouch.exe
    %AppData%\wintouch\wtuninstaller.exe
    %AppData%\wrar380d.exe
    %AppData%\yeah\yeah374809.exe
    %CommonAppData%\38001914.exe
    %CommonAppData%\3810eef8.exe
    %CommonAppData%\381751d0.exe
    %CommonAppData%\388f0900.exe
    %CommonAppData%\38d3ff69.exe
    %CommonAppData%\aol downloads\aoltoolbar\setuptoolbar.exe
    %CommonAppData%\av1\av1.exe
    %CommonAppData%\av1\av1i.exe
    %CommonAppData%\av1\av1i2.exe
    %CommonAppData%\av1\av1two.exe
    %CommonAppData%\av1\qwprotect.dll
    %CommonAppData%\av1\svchost.exe
    %CommonAppData%\av2010\av2010.exe
    %CommonAppData%\av2010\iedefender.dll
    %CommonAppData%\av2010\svchost.exe
    %CommonAppData%\dyned\eng_loc.exe
    %CommonAppData%\e4a12b7\extraav.exe
    %CommonAppData%\e4a12b7\ua2009.exe
    %CommonAppData%\e4a12b7\valarm.exe
    %CommonAppData%\e4a12b7\vmelt.exe
    %CommonAppData%\e4a12b7\vsweep.exe
    %CommonAppData%\fetion\fetionupdate.exe
    %CommonAppData%\gav\sgav.exe
    %CommonAppData%\n1\n1.exe
    %CommonAppData%\n1\n1i.exe
    %CommonAppData%\n1\n1two.exe
    %CommonAppData%\n1\qwprotect.dll
    %CommonAppData%\n1\svchost.exe
    %CommonAppData%\nexon\ngm\ngmdll.dll
    %CommonAppData%\qw2010\qw2010.exe
    %CommonAppData%\qw2010\qw2010i.exe
    %CommonAppData%\qw2010\qw2010i2.exe
    %CommonAppData%\qw2010\qwprotect.dll
    %CommonAppData%\qw2010\svchost.exe
    %CommonAppData%\storm\temp\update.exe
    Notes:
    %AllUsersProfile% is a variable that specifies the all users' profile folder. By default, this is C:\Documents and Settings\All Users (Windows NT/2000/XP).
    %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
    %CommonAppData% is a variable that refers to the file system directory containing application data for all users. A typical path is C:\Documents and Settings\All Users\Application Data.
     
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Just checking> I see Active indicated, but no post in reply.

    Did you need help for malware? What is the purpose of listing all these file names?
     
  3. mokshabhii

    mokshabhii TS Rookie Topic Starter

    Bobbye ,
    Just checking> I see Active indicated, but no post in reply.

    Did you need help for malware? What is the purpose of listing all these file names?


    This 12.exe Virus infect files nd Create these files Which is listed Above,
     
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,335   +36

    Perhaps you didn't realize that the helpers put the prefixes in- so seeing 'Active' would indicate that the thread had been picked up.

    I'm not sure what it is you want me to do. What is the purpose of your listing these files?
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...