PWSteal.Fareit

By GoldSparrow in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	296

First Seen:	October 25, 2011
OS(es) Affected:	Windows

PWSteal.Fareit is a terrible Trojan that is a dangerous threat to your computer system and personal information. PWSteal.Fareit can drop other high-risk malware infections and is difficult to detect, because some PWSteal.Fareit's files use a rootkit method to disguise the processes of PWSteal.Fareit. If you spot the malicious application running inside your Windows system, delete all infected files and uninstall PWSteal.Fareit from your machine as early as you can. PWSteal.Fareit uses software packing procedures to access your PC system. PWSteal.Fareit can collect your private details and drop other malware threats. After successful installation, PWSteal.Fareit will restrict you from accessing Windows Registry and Task Manager, and won't allow you to delete the essential components of PWSteal.Fareit. The malicious components of PWSteal.Fareit can send emails via SMTP protocols, contact other PCs, download unsafe content from the web, generate IE toolbar extensions (iexplore.exe) and even trace your browsing activities. These files cannot be detected by actual security software and work together to disable Windows Security Center processes. Remove PWSteal.Fareit before it harms your computer system.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Trj/OCJ.E
AVG	PSW.Generic11.IWK
Fortinet	W32/Tepfer.JCRZ!tr.pws
BitDefender	Gen:Variant.Zusy.45431
Kaspersky	Trojan-PSW.Win32.Tepfer.jcrz
Avast	Win32:Downloader-TCM [Trj]
McAfee	Artemis!5957EEF06CE4
Panda	Trj/Dtcontx.A
AVG	SHeur4.AZNP
Fortinet	W32/Yakes.BRQC!tr
Ikarus	Virus.Win32.CeeInject
AhnLab-V3	Dropper/Win32.Dapato
TrendMicro	TROJ_RANSOM.SMC8
AntiVir	TR/Agent.94208
Sophos	Mal/EncPk-AGE

SpyHunter Detects & Remove PWSteal.Fareit

File System Details

PWSteal.Fareit may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	dwme.exe	cc6f0b2fd70c63672de6c1249f0e9cbb	137
Name: dwme.exe MD5: cc6f0b2fd70c63672de6c1249f0e9cbb Size: 289.79 KB (289792 bytes) Detections: 137 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: November 21, 2011
2.	zljlvtoxhmvM.exe	22f6f8064d43c9271574ef0d2698889c	49
Name: zljlvtoxhmvM.exe MD5: 22f6f8064d43c9271574ef0d2698889c Size: 196.6 KB (196608 bytes) Detections: 49 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Local Group: Malware file Last Updated: February 6, 2013
3.	csrsss.exe	80f0c02e7f858d1cd74b324c3a61e3e8	23
Name: csrsss.exe MD5: 80f0c02e7f858d1cd74b324c3a61e3e8 Size: 147.96 KB (147960 bytes) Detections: 23 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: January 31, 2013
4.	csrsss.exe	d974a50833111e26cecd0ecd7d36bcf6	15
Name: csrsss.exe MD5: d974a50833111e26cecd0ecd7d36bcf6 Size: 147.96 KB (147960 bytes) Detections: 15 Type: Executable File Path: %SystemDrive%\Documents and Settings\Autocara\Application Data Group: Malware file Last Updated: January 28, 2013
5.	svhostu.exe	0f98a3a23e013479bffab7f233ce39a4	14
Name: svhostu.exe MD5: 0f98a3a23e013479bffab7f233ce39a4 Size: 105.98 KB (105984 bytes) Detections: 14 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: October 25, 2011
6.	FAX_20120811_5506887384_8.pdf.exe	f060ba7a5a4660494cce673c24feb15f	9
Name: FAX_20120811_5506887384_8.pdf.exe MD5: f060ba7a5a4660494cce673c24feb15f Size: 94.2 KB (94208 bytes) Detections: 9 Type: Executable File Path: %USERPROFILE%\My Documents Group: Malware file Last Updated: December 17, 2012
7.	java.exe	287b3de0d02e964678c18a990c7502e0	8
Name: java.exe MD5: 287b3de0d02e964678c18a990c7502e0 Size: 2.78 MB (2789888 bytes) Detections: 8 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: November 28, 2011
8.	170.exe	9c4243b8df3c2b0eb069c18b3afaf608	6
Name: 170.exe MD5: 9c4243b8df3c2b0eb069c18b3afaf608 Size: 289.79 KB (289792 bytes) Detections: 6 Type: Executable File Path: %PROGRAMFILES(x86)%\LP\7808 Group: Malware file Last Updated: November 18, 2011
9.	C6F.exe	f447a6233c1d8f26183ec9835d2754d3	5
Name: C6F.exe MD5: f447a6233c1d8f26183ec9835d2754d3 Size: 292.86 KB (292864 bytes) Detections: 5 Type: Executable File Path: %APPDATA%\Microsoft\F0C7 Group: Malware file Last Updated: December 22, 2011
10.	4BE.exe	4651d7e2baa354742863ea2d1ce66872	3
Name: 4BE.exe MD5: 4651d7e2baa354742863ea2d1ce66872 Size: 289.79 KB (289792 bytes) Detections: 3 Type: Executable File Path: %PROGRAMFILES(x86)%\LP\6E80 Group: Malware file Last Updated: November 30, 2011
11.	06D.exe	4d722ed619351b71d585a0adc5a5370d	2
Name: 06D.exe MD5: 4d722ed619351b71d585a0adc5a5370d Size: 288.25 KB (288256 bytes) Detections: 2 Type: Executable File Path: %PROGRAMFILES(x86)%\LP\9AA8 Group: Malware file Last Updated: November 23, 2011
12.	java.exe	c1c763dd72fe3f55c2ffe0e5833743ad	2
Name: java.exe MD5: c1c763dd72fe3f55c2ffe0e5833743ad Size: 2.91 MB (2916864 bytes) Detections: 2 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: November 24, 2011
13.	EAA.exe	10dd6fc881e4f09d7da5036d5833ffd7	1
Name: EAA.exe MD5: 10dd6fc881e4f09d7da5036d5833ffd7 Size: 286.2 KB (286208 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\Microsoft\2307 Group: Malware file Last Updated: November 28, 2011
14.	644.exe	8023bde63e18907c9fb614749ddf1952	1
Name: 644.exe MD5: 8023bde63e18907c9fb614749ddf1952 Size: 292.35 KB (292352 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES%\LP\9823 Group: Malware file Last Updated: December 27, 2011
15.	iexplore.exe	0fa353ae401cf237fb06de60734c8444	1
Name: iexplore.exe MD5: 0fa353ae401cf237fb06de60734c8444 Size: 280.06 KB (280064 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: January 10, 2012
16.	YOUTUBE.PLAYER.exe	0e90bb9ddcb98e1e2759858b0b74bbce	1
Name: YOUTUBE.PLAYER.exe MD5: 0e90bb9ddcb98e1e2759858b0b74bbce Size: 94.2 KB (94208 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: February 6, 2013
17.	msromko.com	5957eef06ce4f0f930925651dbb40ade	1
Name: msromko.com MD5: 5957eef06ce4f0f930925651dbb40ade Size: 138.24 KB (138240 bytes) Detections: 1 Type: Command, executable file Path: %ALLUSERSPROFILE%\Local Settings\Temp Group: Malware file Last Updated: May 13, 2013
18.	gwkkIIVrlON.exe
Name: gwkkIIVrlON.exe Type: Executable File Group: Malware file
19.	nHH55sWJJ7EL8RZ.exe
Name: nHH55sWJJ7EL8RZ.exe Type: Executable File Group: Malware file
20.	fcunfcogfupdt32.dll
Name: fcunfcogfupdt32.dll Type: Dynamic link library Group: Malware file
21.	6B9.exe
Name: 6B9.exe Type: Executable File Group: Malware file
22.	7D7.exe
Name: 7D7.exe Type: Executable File Group: Malware file
23.	8B8.exe
Name: 8B8.exe Type: Executable File Group: Malware file
24.	F7ddEL8gTZqYCkV.exe
Name: F7ddEL8gTZqYCkV.exe Type: Executable File Group: Malware file
25.	d000uvvS2ibFpn5.exe
Name: d000uvvS2ibFpn5.exe Type: Executable File Group: Malware file
26.	306.exe
Name: 306.exe Type: Executable File Group: Malware file
27.	wmplayer.exe
Name: wmplayer.exe Type: Executable File Group: Malware file
28.	4D7.exe
Name: 4D7.exe Type: Executable File Group: Malware file
29.	GoogleNotifierOnline.dll
Name: GoogleNotifierOnline.dll Type: Dynamic link library Group: Malware file
30.	14247e.exe
Name: 14247e.exe Type: Executable File Group: Malware file
31.	93F.exe
Name: 93F.exe Type: Executable File Group: Malware file
32.	C6F.exe
Name: C6F.exe Type: Executable File Group: Malware file
33.	hWWWK77fRL9g.exe
Name: hWWWK77fRL9g.exe Type: Executable File Group: Malware file
34.	djjUUCeekIrzPyA.exe
Name: djjUUCeekIrzPyA.exe Type: Executable File Group: Malware file
35.	A66ssWKK7fE9gZq.exe
Name: A66ssWKK7fE9gZq.exe Type: Executable File Group: Malware file
36.	E33.exe
Name: E33.exe Type: Executable File Group: Malware file
37.	8EE.exe
Name: 8EE.exe Type: Executable File Group: Malware file
38.	41816797-5016.exe
Name: 41816797-5016.exe Type: Executable File Group: Malware file
39.	be792753.dll
Name: be792753.dll Type: Dynamic link library Group: Malware file
40.	A89.exe
Name: A89.exe Type: Executable File Group: Malware file
41.	AE947CD1935.exe
Name: AE947CD1935.exe Type: Executable File Group: Malware file
42.	kdhr.exe
Name: kdhr.exe Type: Executable File Group: Malware file
43.	4c770a9bd1e8373a1ebd4a9f2245c315	4c770a9bd1e8373a1ebd4a9f2245c315	0
Name: 4c770a9bd1e8373a1ebd4a9f2245c315 MD5: 4c770a9bd1e8373a1ebd4a9f2245c315 Size: 608.32 KB (608320 bytes) Detections: 0 Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PWSteal.Fareit

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove PWSteal.Fareit

File System Details

Submit Comment

Related Posts

Trojan.PWSteal.Fareit.A

PWSteal.Fareit.gen!C

PWSteal.Fareit.C

PWSteal.Fareit.gen!I

PWSteal.Fareit.gen!A

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen