Spammer.Tedroo

By ZulaZuza in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	19

First Seen:	December 7, 2010
OS(es) Affected:	Windows

Spammer.Tedroo is a harmful spammer Trojan which delivers malicious links via enclosed spam emails. It is sometimes hard to recognize the spam mail from Spammer.Tedroo as a spam, because it comes well encrypted and the parasite manages to disguise itself from the PC user. Spammer.Tedroo also circulates via the same channels, when it sends spam email messages. Spammer.Tedroo gets its configuration data from a remote server and all the spam is sent through SMTP servers, which is an Internet standard for email transfer across the IP networks. Whenever Spammer.Tedroo corrupts a PC system, it connects to a remote server to report about the new parasite and then it retrieves information which needs to be transmitted with that spam email message. When Spammer.Tedroo accesses your computer, it sets itself as a software tool which is enabled to operate within the Windows firewall. Then Spammer.Tedroo makes certain system changes which enable Spammer.Tedroo to send out spam messages from the targeted computer. The emails sent are generally encoded in HTML format, which means that they have hyperlinks embedded and the user who receives those emails does not need to copy and paste whatever the email is suggesting into his or her web browser. Clicking on the link within the spam email message affects the user with another Trojan infection, thus exposing the PC system to even a bigger risk. The users are misled into thinking that they are clicking to see a free famous actress video or something similar to that.You should delete Spammer.Tedroo from your machine as quickly as possible because it can seriously destroy your computer system and then result in even more serious risks.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
Panda	Trj/CI.A
AVG	Downloader.Generic10.SRI
Ikarus	Trojan-Downloader.Win32.FraudLoad
Sunbelt	Trojan.Win32.Generic.pak!cobra
Antiy-AVL	Trojan/Win32.FraudLoad
TrendMicro	PAK_Generic.012
AntiVir	TR/Dldr.FraudLoad.haz.2
DrWeb	Trojan.Packed.20878
Kaspersky	Trojan-Downloader.Win32.FraudLoad.haz
Avast	Win32:Crypt-HPM
NOD32	a variant of Win32/Kryptik.GUO
McAfee	Generic.dx!twk
AVG	FakeAlert.SK
a-squared	Packed.Win32.Krap.gy!A2
McAfee-GW-Edition	Artemis!F2D4DBB3D77A

SpyHunter Detects & Remove Spammer.Tedroo

File System Details

Spammer.Tedroo may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	explorer.exe:userini.exe	b0894ae6a97dc363596dbcad64e02487	3
Name: explorer.exe:userini.exe MD5: b0894ae6a97dc363596dbcad64e02487 Size: 55.29 KB (55296 bytes) Detections: 3 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 8, 2010
2.	38144121.exe	d96b11a3b27b234227ab4ebb8a641aee	2
Name: 38144121.exe MD5: d96b11a3b27b234227ab4ebb8a641aee Size: 886.28 KB (886288 bytes) Detections: 2 Type: Executable File Path: %ALLUSERSPROFILE%\Anwendungsdaten\38144121 Group: Malware file Last Updated: December 8, 2010
3.	79641027.exe	63ca8d0f8efa5c22dd5eb09a4a527b5f	1
Name: 79641027.exe MD5: 63ca8d0f8efa5c22dd5eb09a4a527b5f Size: 870.92 KB (870928 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Anwendungsdaten\79641027 Group: Malware file Last Updated: December 8, 2010
4.	49363934.exe	62bf2d052387c55d3009f4c87d773427	1
Name: 49363934.exe MD5: 62bf2d052387c55d3009f4c87d773427 Size: 888.84 KB (888848 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data\49363934 Group: Malware file Last Updated: December 8, 2010
5.	fltMasks.dll	f2d4dbb3d77aebe00c2969ff05ad2297	1
Name: fltMasks.dll MD5: f2d4dbb3d77aebe00c2969ff05ad2297 Size: 40.96 KB (40960 bytes) Detections: 1 Type: Dynamic link library Path: %TEMP% Group: Malware file Last Updated: December 8, 2010
6.	userini.exe	df7a6d399c1a312873ab547e96bc41bc	1
Name: userini.exe MD5: df7a6d399c1a312873ab547e96bc41bc Size: 54.78 KB (54784 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 8, 2010
7.	userini.exe	7d712668c173965c2c0b31e227c560e7	1
Name: userini.exe MD5: 7d712668c173965c2c0b31e227c560e7 Size: 54.78 KB (54784 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 8, 2010
8.	explorer.exe:userini.exe	cb177d7cde5567565b9f90250ba340f9	1
Name: explorer.exe:userini.exe MD5: cb177d7cde5567565b9f90250ba340f9 Size: 54.78 KB (54784 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 8, 2010
9.	explorer.exe:userini.exe	61f9b299ea2645741294f128b9c72280	1
Name: explorer.exe:userini.exe MD5: 61f9b299ea2645741294f128b9c72280 Size: 55.8 KB (55808 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 8, 2010
10.	userini.exe	0427d1068a2b521e1dbb20ce99f818be	1
Name: userini.exe MD5: 0427d1068a2b521e1dbb20ce99f818be Size: 55.8 KB (55808 bytes) Detections: 1 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 8, 2010
11.	explorer.exe:userini.exe	44b8c7bbe586bb7a54d136124d9b5028	1
Name: explorer.exe:userini.exe MD5: 44b8c7bbe586bb7a54d136124d9b5028 Size: 55.8 KB (55808 bytes) Detections: 1 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: December 7, 2010
12.	mstatea.dll
Name: mstatea.dll Type: Dynamic link library Group: Malware file
13.	009547.exe
Name: 009547.exe Type: Executable File Group: Malware file
14.	winlogon.exe
Name: winlogon.exe Type: Executable File Group: Malware file
15.	09939939.exe
Name: 09939939.exe Type: Executable File Group: Malware file
16.	csrss.exe
Name: csrss.exe Type: Executable File Group: Malware file
17.	nbcqz.exe
Name: nbcqz.exe Type: Executable File Group: Malware file
18.	cacheautoobj.exe
Name: cacheautoobj.exe Type: Executable File Group: Malware file
19.	mfpmsc.dll
Name: mfpmsc.dll Type: Dynamic link library Group: Malware file
20.	msvmcls64.exe
Name: msvmcls64.exe Type: Executable File Group: Malware file
21.	userinit.exe
Name: userinit.exe Type: Executable File Group: Malware file
22.	services.exe
Name: services.exe Type: Executable File Group: Malware file
23.	14.exe
Name: 14.exe Type: Executable File Group: Malware file
24.	setup.exe
Name: setup.exe Type: Executable File Group: Malware file
25.	taskmgr.exe
Name: taskmgr.exe Type: Executable File Group: Malware file
26.	wuauclt.exe
Name: wuauclt.exe Type: Executable File Group: Malware file
27.	rarydse.dll
Name: rarydse.dll Type: Dynamic link library Group: Malware file
28.	winlagon.exe
Name: winlagon.exe Type: Executable File Group: Malware file
29.	msvmiode.exe
Name: msvmiode.exe Type: Executable File Group: Malware file
30.	servises.exe
Name: servises.exe Type: Executable File Group: Malware file
31.	34611015.exe
Name: 34611015.exe Type: Executable File Group: Malware file
32.	winwrrh.exe
Name: winwrrh.exe Type: Executable File Group: Malware file
33.	fb hack.exe
Name: fb hack.exe Type: Executable File Group: Malware file
34.	svchost.exe
Name: svchost.exe Type: Executable File Group: Malware file
35.	rav.exe
Name: rav.exe Type: Executable File Group: Malware file
36.	68.tmp
Name: 68.tmp Type: Temporary File Group: Malware file
37.	odcsskt.dat
Name: odcsskt.dat Type: Data file Group: Malware file

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Spammer.Tedroo

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Spammer.Tedroo

File System Details

Submit Comment

Related Posts

Spammer.Tedroo.AE

Spammer.Tedroo.X

Spammer.Tedroo.J

Spammer.Tedroo.A

Spammer.Tedroo.I

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen