Worm:Win32/Rebhip.gen!A

By ZulaZuza in Worms

Worm:Win32/Rebhip.gen!A is a worm that is proliferates via removable drives by replicating itself. Worm:Win32/Rebhip.gen!A strives to steal confidential information from the victim. While being installed on the corrupted machine, Worm:Win32/Rebhip.gen!A makes system changes by downloading malevolent files and modifying the Windows Registry. Worm:Win32/Rebhip.gen!A creates the registry entry so that it can load automatically whenever Windows is started. Worm:Win32/Rebhip.gen!A may also open the Internet Explorer process 'iexplore.exe' and embed a malevolent code into it. Worm:Win32/Rebhip.gen!A then writes an Autorun configuration file called 'autorun.inf', which points to the copy of Worm:Win32/Rebhip.gen!A. If the drive is accessed from a computer, which supports the Autorun feature, Worm:Win32/Rebhip.gen!A runs automatically. Worm:Win32/Rebhip.gen!A steals private details by gathering various data about the victimized PC, such as what anti-virus program is installed, and which processes or services are presently running. Worm:Win32/Rebhip.gen!A may also log keystrokes and grab passwords. Worm:Win32/Rebhip.gen!A transfers its collected data to a remote attacker.

File System Details

Worm:Win32/Rebhip.gen!A may create the following file(s):

Expand All | Collapse All

#	File Name	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	[system folder]\install\system.exe
Name: [system folder]\install\system.exe Type: Executable File Group: Malware file
2.	%windir%\install\update.exe
Name: %windir%\install\update.exe Type: Executable File Group: Malware file
3.	[system folder]\WinDefence\windefence32.exe
Name: [system folder]\WinDefence\windefence32.exe Type: Executable File Group: Malware file
4.	[system folder]\backup\winbackup.exe
Name: [system folder]\backup\winbackup.exe Type: Executable File Group: Malware file
5.	[system folder]\taskmanager\task.exe
Name: [system folder]\taskmanager\task.exe Type: Executable File Group: Malware file
6.	[system folder]\windows\windows.exe
Name: [system folder]\windows\windows.exe Type: Executable File Group: Malware file
7.	%Temp%\uuu.uuu
Name: %Temp%\uuu.uuu Group: Malware file
8.	%Temp%\xxx.xxx
Name: %Temp%\xxx.xxx Group: Malware file

Registry Details

Worm:Win32/Rebhip.gen!A may create the following registry entry or registry entries:

HKEY..\..\..\..{RegistryKeys}

HKEY_CURRENT_USER\Software\SlysBitch "FirstExecution" = "[current date and time]" (for example: "21/12/2009 -- 03:58")

HKEY_CURRENT_USER\Software\SlysBitch "FirstExecution" "NewIdentification" = "SlysBitch"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run "WinDefence" = "[system folder]\WinDefence\windefence32.exe"

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Worm:Win32/Rebhip.gen!A

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen