Win32.downloader.gen

By Domesticus in Trojan Downloader

Threat Scorecard

Threat Level:	90 % (High)
Infected Computers:	1

First Seen:	April 15, 2013
Last Seen:	January 23, 2020
OS(es) Affected:	Windows

Win32.downloader.gen is a Trojan downloader that propagates to targeted PCs with the help of social engineering. Win32.downloader.gen will strive to control and induce a victim to carry out an action or to reveal private details inadvertently or against his/her will. Win32.downloader.gen can also circulate via spam email messages carrying malevolent attachments. Win32.downloader.gen can distribute other malware infections to the corrupted PC. While being installed, Win32.downloader.gen makes system changes by dropping and executing harmful files. Win32.downloader.gen can grab confidential information, incorporating running Windows version on the compromised PC.

File System Details

Win32.downloader.gen may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
Name: C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe Type: Executable File Group: Malware file
2.	C:\Windows\system32\lsm.exe
Name: C:\Windows\system32\lsm.exe Type: Executable File Group: Malware file
3.	C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
Name: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe Type: Executable File Group: Malware file
4.	C:\Windows\system32\SLsvc.exe
Name: C:\Windows\system32\SLsvc.exe Type: Executable File Group: Malware file
5.	C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
Name: C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE Type: Executable File Group: Malware file
6.	C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe
Name: C:\Program Files\Motorola\MotForwardDaemon\ForwardDaemon.exe Type: Executable File Group: Malware file
7.	C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
Name: C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe Type: Executable File Group: Malware file
8.	C:\Program Files\Creative\Volume Panel\VolPanlu.exe
Name: C:\Program Files\Creative\Volume Panel\VolPanlu.exe Type: Executable File Group: Malware file
9.	C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
Name: C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe Type: Executable File Group: Malware file
10.	C:\Windows\system32\dmwu.exe
Name: C:\Windows\system32\dmwu.exe Type: Executable File Group: Malware file
11.	C:\Windows\system32\WebUpdateSvc4.exe
Name: C:\Windows\system32\WebUpdateSvc4.exe Type: Executable File Group: Malware file
12.	C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
Name: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe Type: Executable File Group: Malware file
13.	C:\Windows\system32\Dwm.exe
Name: C:\Windows\system32\Dwm.exe Type: Executable File Group: Malware file
14.	C:\Program Files\Windows Media Player\wmpnscfg.exe
Name: C:\Program Files\Windows Media Player\wmpnscfg.exe Type: Executable File Group: Malware file
15.	C:\Windows\SYSTEM32\CTXFISPI.EXE
Name: C:\Windows\SYSTEM32\CTXFISPI.EXE Type: Executable File Group: Malware file
16.	C:\Program Files\iPod\bin\iPodService.exe
Name: C:\Program Files\iPod\bin\iPodService.exe Type: Executable File Group: Malware file
17.	C:\Program Files\Microsoft Security Client\msseces.exe
Name: C:\Program Files\Microsoft Security Client\msseces.exe Type: Executable File Group: Malware file
18.	C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
Name: C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe Type: Executable File Group: Malware file
19.	C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
Name: C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe Type: Executable File Group: Malware file
20.	C:\Program Files\Google\Chrome\Application\chrome.exe
Name: C:\Program Files\Google\Chrome\Application\chrome.exe Type: Executable File Group: Malware file
21.	C:\Windows\system32\SearchFilterHost.exe
Name: C:\Windows\system32\SearchFilterHost.exe Type: Executable File Group: Malware file
22.	C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
Name: C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe Type: Executable File Group: Malware file
23.	C:\Windows\system32\vssvc.exe
Name: C:\Windows\system32\vssvc.exe Type: Executable File Group: Malware file
24.	c:\Program Files\Microsoft Security Client\MsMpEng.exe
Name: c:\Program Files\Microsoft Security Client\MsMpEng.exe Type: Executable File Group: Malware file
25.	C:\Windows\system32\wininit.exe
Name: C:\Windows\system32\wininit.exe Type: Executable File Group: Malware file
26.	C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
Name: C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe Type: Executable File Group: Malware file
27.	C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe
Name: C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe Type: Executable File Group: Malware file
28.	C:\Windows\System32\spoolsv.exe
Name: C:\Windows\System32\spoolsv.exe Type: Executable File Group: Malware file
29.	C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
Name: C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe Type: Executable File Group: Malware file
30.	C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
Name: C:\Program Files\Web Assistant\ExtensionUpdaterService.exe Type: Executable File Group: Malware file
31.	C:\Windows\system32\taskeng.exe
Name: C:\Windows\system32\taskeng.exe Type: Executable File Group: Malware file
32.	C:\Program Files\Verizon\McciTrayApp.exe
Name: C:\Program Files\Verizon\McciTrayApp.exe Type: Executable File Group: Malware file
33.	C:\Windows\System32\Ctxfihlp.exe
Name: C:\Windows\System32\Ctxfihlp.exe Type: Executable File Group: Malware file
34.	C:\Windows\system32\lxbccoms.exe
Name: C:\Windows\system32\lxbccoms.exe Type: Executable File Group: Malware file
35.	C:\Windows\system32\SearchIndexer.exe
Name: C:\Windows\system32\SearchIndexer.exe Type: Executable File Group: Malware file
36.	c:\Program Files\Microsoft Security Client\NisSrv.exe
Name: c:\Program Files\Microsoft Security Client\NisSrv.exe Type: Executable File Group: Malware file
37.	C:\Windows\System32\jmdp\stij.exe
Name: C:\Windows\System32\jmdp\stij.exe Type: Executable File Group: Malware file
38.	C:\Program Files\Garmin\Express Tray\ExpressTray.exe
Name: C:\Program Files\Garmin\Express Tray\ExpressTray.exe Type: Executable File Group: Malware file
39.	C:\Windows\ehome\ehsched.exe
Name: C:\Windows\ehome\ehsched.exe Type: Executable File Group: Malware file
40.	C:\Windows\ehome\ehRecvr.exe
Name: C:\Windows\ehome\ehRecvr.exe Type: Executable File Group: Malware file
41.	C:\Program Files\iTunes\iTunesHelper.exe
Name: C:\Program Files\iTunes\iTunesHelper.exe Type: Executable File Group: Malware file
42.	C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
Name: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe Type: Executable File Group: Malware file
43.	C:\Program Files\Skype\Phone\Skype.exe
Name: C:\Program Files\Skype\Phone\Skype.exe Type: Executable File Group: Malware file
44.	C:\Windows\system32\SearchProtocolHost.exe
Name: C:\Windows\system32\SearchProtocolHost.exe Type: Executable File Group: Malware file
45.	C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
Name: C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe Type: Executable File Group: Malware file
46.	C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
Name: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe Type: Executable File Group: Malware file
47.	C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
Name: C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe Type: Executable File Group: Malware file
48.	C:\Program Files\Creative\Shared Files\CTAudSvc.exe
Name: C:\Program Files\Creative\Shared Files\CTAudSvc.exe Type: Executable File Group: Malware file
49.	C:\Windows\system32\nvvsvc.exe
Name: C:\Windows\system32\nvvsvc.exe Type: Executable File Group: Malware file
50.	C:\Program Files\Bonjour\mDNSResponder.exe
Name: C:\Program Files\Bonjour\mDNSResponder.exe Type: Executable File Group: Malware file
51.	C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
Name: C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe Type: Executable File Group: Malware file
52.	C:\Program Files\Common Files\Motive\McciCMService.exe
Name: C:\Program Files\Common Files\Motive\McciCMService.exe Type: Executable File Group: Malware file
53.	C:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe
Name: C:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe Type: Executable File Group: Malware file
54.	C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe
Name: C:\Program Files\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe Type: Executable File Group: Malware file
55.	C:\Windows\WindowsMobile\wmdcBase.exe
Name: C:\Windows\WindowsMobile\wmdcBase.exe Type: Executable File Group: Malware file
56.	C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
Name: C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe Type: Executable File Group: Malware file
57.	C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe
Name: C:\Program Files\Verizon\IHA_MessageCenter\Bin\Verizon_IHAMessageCenter.exe Type: Executable File Group: Malware file
58.	C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
Name: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE Type: Executable File Group: Malware file
59.	C:\Windows\System32\WUDFHost.exe
Name: C:\Windows\System32\WUDFHost.exe Type: Executable File Group: Malware file
60.	C:\Windows\Explorer.EXE
Name: C:\Windows\Explorer.EXE Type: Executable File Group: Malware file
61.	C:\Program Files\Windows Media Player\wmpnetwk.exe
Name: C:\Program Files\Windows Media Player\wmpnetwk.exe Type: Executable File Group: Malware file
62.	C:\Windows\ehome\ehmsas.exe
Name: C:\Windows\ehome\ehmsas.exe Type: Executable File Group: Malware file
63.	C:\Windows\System32\mobsync.exe
Name: C:\Windows\System32\mobsync.exe Type: Executable File Group: Malware file
64.	C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
Name: C:\Program Files\NVIDIA Corporation\Display\nvtray.exe Type: Executable File Group: Malware file
65.	C:\Windows\ehome\ehtray.exe
Name: C:\Windows\ehome\ehtray.exe Type: Executable File Group: Malware file
66.	C:\Program Files\Google\Drive\googledrivesync.exe
Name: C:\Program Files\Google\Drive\googledrivesync.exe Type: Executable File Group: Malware file
67.	C:\Users\\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
Name: C:\Users\<username>\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe Type: Executable File Group: Malware file
68.	C:\Windows\system32\wbem\wmiprvse.exe
Name: C:\Windows\system32\wbem\wmiprvse.exe Type: Executable File Group: Malware file
69.	C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
Name: C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe Type: Executable File Group: Malware file
70.	C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Name: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted Group: Malware file
71.	C:\Windows\system32\svchost.exe -k GPSvcGroup
Name: C:\Windows\system32\svchost.exe -k GPSvcGroup Group: Malware file
72.	C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Name: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork Group: Malware file
73.	C:\Windows\System32\svchost.exe -k WerSvcGroup
Name: C:\Windows\System32\svchost.exe -k WerSvcGroup Group: Malware file
74.	C:\Windows\System32\svchost.exe -k swprv
Name: C:\Windows\System32\svchost.exe -k swprv Group: Malware file
75.	C:\Windows\system32\svchost.exe -k rpcss
Name: C:\Windows\system32\svchost.exe -k rpcss Group: Malware file
76.	C:\Windows\system32\svchost.exe -k netsvcs
Name: C:\Windows\system32\svchost.exe -k netsvcs Group: Malware file
77.	C:\Windows\system32\svchost.exe -k NetworkService
Name: C:\Windows\system32\svchost.exe -k NetworkService Group: Malware file
78.	C:\Windows\system32\svchost.exe -k imgsvc
Name: C:\Windows\system32\svchost.exe -k imgsvc Group: Malware file
79.	C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Name: C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation Group: Malware file
80.	C:\Windows\system32\svchost.exe -k DcomLaunch
Name: C:\Windows\system32\svchost.exe -k DcomLaunch Group: Malware file
81.	C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Name: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted Group: Malware file
82.	C:\Windows\system32\svchost.exe -k LocalService
Name: C:\Windows\system32\svchost.exe -k LocalService Group: Malware file
83.	C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Name: C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted Group: Malware file
84.	C:\Windows\system32\svchost.exe -k WindowsMobile
Name: C:\Windows\system32\svchost.exe -k WindowsMobile Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Win32.downloader.gen

Threat Scorecard

EnigmaSoft Threat Scorecard

File System Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen