Tempedreve

By GoldSparrow in Trojans

Threat Scorecard

Threat Level: 90 % (High)
Infected Computers: 9
First Seen: March 20, 2015
Last Seen: September 5, 2019
OS(es) Affected: Windows

The cyber threat called Tempedreve is a worm that is dispersed via infected USB drives and shared network folders and can appear as 'temp.exe'. The Tempedreve worm can place its executable file in the 'APPDATA' folder of Windows under the seemingly legitimate name 'disketup.exe' or 'audil386.exe'. Additionally the Tempedreve worm can modify the registry of Windows in order to start with your OS at every boot-up as a subkey named 'dialwwiz'. Malware researchers point out that the Tempedreve worm can create a mutex on the system as a way to prevent more than copy of the threat to run on your PC. If your computer is compromised by the Tempedreve worm, it may add a new service that can be used by attackers to gather information, steal passwords and take snapshots of your screen. Also, the Tempedreve worm can corrupt installer packages with the .msi extension, PDF documents and .exe files. Users can choose to install a trusted anti-malware solution that can protect their data and limit their attack surface.

Trending

Most Viewed

Loading...