Trojan.Bumat!rts

By LoneStar in Trojans

Threat Scorecard

Popularity Rank:	21,023
Threat Level:	80 % (High)
Infected Computers:	1,989

First Seen:	November 30, 2010
Last Seen:	October 25, 2025
OS(es) Affected:	Windows

Trojan.Bumat!rts is a dangerous Trojan usually hidden within legitimate executable files belonging to other programs. Trojan.Bumat!rts sometimes goes hidden from detection for long periods of time. During this time, Trojan.Bumat!rts may render malicious actions that cause the infected PC to operate abnormally. A hacker may use Trojan.Bumat!rts to infiltrate an infected system and put stored data at risk of being stolen. It is important to remove Trojan.Bumat!rts without hesitation when detected.

Table of Contents

Aliases

15 security vendors flagged this file as malicious.

Antivirus Vendor	Detection
Panda	Bck/Bifrose.BIS
Fortinet	W32/Bifrose.DSXR!tr.bdr
Ikarus	Backdoor.Win32.Turkojan
AhnLab-V3	Trojan/Win32.Buzus
Kaspersky	Backdoor.Win32.Bifrose.dsxr
McAfee	BackDoor-CEP!bak
Panda	Trj/OCJ.C
AVG	PSW.Generic10.BEJW
Fortinet	W32/Kryptik.ARMF!tr
Ikarus	Trojan-Ransom.Win32.Blocker
TrendMicro	TROJ_SIGEKAF.SM
AntiVir	TR/Crypt.XPACK.Gen7
F-Secure	Trojan:W32/Kamala.A
Sophos	Mal/Zbot-KN
Kaspersky	Trojan-Ransom.Win32.Blocker.ahpl

SpyHunter Detects & Remove Trojan.Bumat!rts

File System Details

Trojan.Bumat!rts may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	5C91.exe	8e46277add1f964bac145a5335068085	56
Name: 5C91.exe MD5: 8e46277add1f964bac145a5335068085 Size: 106.49 KB (106496 bytes) Detections: 56 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: October 5, 2012
2.	wlsidten.exe	0361c9929effd6909b72fba6379c925a	36
Name: wlsidten.exe MD5: 0361c9929effd6909b72fba6379c925a Size: 158.2 KB (158208 bytes) Detections: 36 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: December 17, 2012
3.	01kt75pr89.exe	003275cf24487841e1cee9da0bb8996b	27
Name: 01kt75pr89.exe MD5: 003275cf24487841e1cee9da0bb8996b Size: 19.4 KB (19400 bytes) Detections: 27 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: July 3, 2021
4.	fastsrch.dll	1f82b816e682bb7efeb210269d8a6798	21
Name: fastsrch.dll MD5: 1f82b816e682bb7efeb210269d8a6798 Size: 123.39 KB (123392 bytes) Detections: 21 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: August 21, 2012
5.	mafi6whezj.exe	6ed519e64113b8d8c051c38bd6680ab0	20
Name: mafi6whezj.exe MD5: 6ed519e64113b8d8c051c38bd6680ab0 Size: 15.87 KB (15872 bytes) Detections: 20 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: December 17, 2012
6.	worldclock.scr	fbd68d7d7d372097331c2703b33f3a2a	17
Name: worldclock.scr MD5: fbd68d7d7d372097331c2703b33f3a2a Size: 1.02 MB (1023035 bytes) Detections: 17 Path: C:\Windows\System32\worldclock.scr Group: Malware file Last Updated: October 25, 2025
7.	derm32.exe	d0dd0c2b6ed9605314843a5d165df25e	14
Name: derm32.exe MD5: d0dd0c2b6ed9605314843a5d165df25e Size: 68.6 KB (68608 bytes) Detections: 14 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: August 27, 2012
8.	Airbag Version 1.0_Patch.exe	68690e1044b927916da0374bb99ef494	10
Name: Airbag Version 1.0_Patch.exe MD5: 68690e1044b927916da0374bb99ef494 Size: 346.28 KB (346289 bytes) Detections: 10 Type: Executable File Path: C:\Users\<username>\Desktop\Desktop\test documents\airbag_version1.0\airbag_version1.0\Airbag Version 1.0_Patch.exe Group: Malware file Last Updated: August 3, 2022
9.	1jfuweif.exe	b894555463f935930b69c7ea387fd462	8
Name: 1jfuweif.exe MD5: b894555463f935930b69c7ea387fd462 Size: 48.64 KB (48640 bytes) Detections: 8 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: September 3, 2012
10.	pingrel.exe	42e862f88c3937725cde66644cd6095d	7
Name: pingrel.exe MD5: 42e862f88c3937725cde66644cd6095d Size: 304.64 KB (304640 bytes) Detections: 7 Type: Executable File Path: %WINDIR%\SysWOW64 Group: Malware file Last Updated: October 5, 2012
11.	indy.exe	27387028a6db9cb115d8a6f450ba7e69	5
Name: indy.exe MD5: 27387028a6db9cb115d8a6f450ba7e69 Size: 57.34 KB (57344 bytes) Detections: 5 Type: Executable File Path: %TEMP%\tmp Group: Malware file Last Updated: September 19, 2019
12.	wgsdgsdgdsgsd.exe	db8b1348d925b09f98c6784edc24ab84	5
Name: wgsdgsdgdsgsd.exe MD5: db8b1348d925b09f98c6784edc24ab84 Size: 152.06 KB (152064 bytes) Detections: 5 Type: Executable File Path: %WINDIR%\system32 Group: Malware file Last Updated: November 22, 2012
13.	cls.exe	018e4c30cfab703801bb212e23d3beb1	5
Name: cls.exe MD5: 018e4c30cfab703801bb212e23d3beb1 Size: 526.33 KB (526336 bytes) Detections: 5 Type: Executable File Path: %COMMONPROGRAMFILES(x86)%\Planit\2010.20\cls Group: Malware file Last Updated: May 31, 2020
14.	setup.exe	ccdde0ac25ab6244c5c5794bc03dffb5	4
Name: setup.exe MD5: ccdde0ac25ab6244c5c5794bc03dffb5 Size: 2.28 MB (2283387 bytes) Detections: 4 Type: Executable File Path: C:\Users\<username>\AppData\Roaming\setup.exe Group: Malware file Last Updated: October 24, 2022
15.	9iwqj1rup4.exe	af0c9a72317da2f38b08f2db6718b537	4
Name: 9iwqj1rup4.exe MD5: af0c9a72317da2f38b08f2db6718b537 Size: 19.38 KB (19384 bytes) Detections: 4 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: December 17, 2012
16.	messenger.exe	03be5491795a1d53401a7e9063d797a6	4
Name: messenger.exe MD5: 03be5491795a1d53401a7e9063d797a6 Size: 167.93 KB (167936 bytes) Detections: 4 Type: Executable File Path: %PROGRAMFILES%\GoogleUpdater Group: Malware file Last Updated: October 30, 2012
17.	AF41.exe	c73b6b3df500058594724129300961b2	4
Name: AF41.exe MD5: c73b6b3df500058594724129300961b2 Size: 117.76 KB (117760 bytes) Detections: 4 Type: Executable File Path: %USERPROFILE%\Application Data Group: Malware file Last Updated: December 17, 2012
18.	n.	a2793f92629b1583ec77708c71e173cc	3
Name: n. MD5: a2793f92629b1583ec77708c71e173cc Size: 74.75 KB (74752 bytes) Detections: 3 Path: %SystemDrive%\RECYCLER\S-1-5-21-220523388-308236825-1801674531-1003\$6abd3f6cdff198c2a9240c1a61468243 Group: Malware file Last Updated: October 9, 2012
19.	winlogons.exe	766d65b61d93a38274f7a944245d8286	3
Name: winlogons.exe MD5: 766d65b61d93a38274f7a944245d8286 Size: 2.45 MB (2456064 bytes) Detections: 3 Type: Executable File Path: %SystemDrive%\win7xe Group: Malware file Last Updated: March 21, 2013
20.	TURegOpt.exe	541516f78c409f3ffb1d1db07d08a9f8	2
Name: TURegOpt.exe MD5: 541516f78c409f3ffb1d1db07d08a9f8 Size: 58.88 KB (58880 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\949 Group: Malware file Last Updated: September 25, 2012
21.	Windows_security_update_3475_36_d.exe	b43d9a927ffc035b3a9b8633251e603b	2
Name: Windows_security_update_3475_36_d.exe MD5: b43d9a927ffc035b3a9b8633251e603b Size: 423.37 KB (423377 bytes) Detections: 2 Type: Executable File Path: %USERPROFILE%\Mijn documenten\Backups\Windows\Windows_security_backup files Group: Malware file Last Updated: November 9, 2012
22.	f6721[1].exe	953886c1372f182313aa1006084b4675	2
Name: f6721[1].exe MD5: 953886c1372f182313aa1006084b4675 Size: 231.41 KB (231416 bytes) Detections: 2 Type: Executable File Path: %LOCALAPPDATA%\Microsoft\Windows\Temporary Internet Files\Content.IE5\AH9255E1 Group: Malware file Last Updated: December 11, 2012
23.	mdhcp32.dll	82395077132bd997f5e40a01ef37a089	2
Name: mdhcp32.dll MD5: 82395077132bd997f5e40a01ef37a089 Size: 49.15 KB (49152 bytes) Detections: 2 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: February 22, 2013
24.	2h6jpluy.exe	1c26130723ef0b734db58733d537b0e2	1
Name: 2h6jpluy.exe MD5: 1c26130723ef0b734db58733d537b0e2 Size: 103.93 KB (103936 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: August 16, 2012
25.	mstxxfwdx.pif	a97d3f6e40c30dc52abb7aeee56f8c35	1
Name: mstxxfwdx.pif MD5: a97d3f6e40c30dc52abb7aeee56f8c35 Size: 55.8 KB (55808 bytes) Detections: 1 Path: %ALLUSERSPROFILE%\Local Settings\Temp Group: Malware file Last Updated: October 5, 2012
26.	SysProcLog.sys	a491b791aedc1fb447b7ec8db17d1f6e	1
Name: SysProcLog.sys MD5: a491b791aedc1fb447b7ec8db17d1f6e Size: 14.08 KB (14080 bytes) Detections: 1 Type: System file Path: E:\NBMSClient\Sys Group: Malware file Last Updated: October 15, 2012
27.	yyyycmcqo.exe	9817da493c037eeafc830ec38319adea	1
Name: yyyycmcqo.exe MD5: 9817da493c037eeafc830ec38319adea Size: 88.88 KB (88888 bytes) Detections: 1 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: April 29, 2013
28.	fishpe2.sys	efbd05c80f3dd3d9bb39aeb9f6142b0e	1
Name: fishpe2.sys MD5: efbd05c80f3dd3d9bb39aeb9f6142b0e Size: 23.04 KB (23040 bytes) Detections: 1 Type: System file Path: %WINDIR%\system32 Group: Malware file Last Updated: February 6, 2013
29.	2.exe	89acb7fa1fb9e1c43887c9003a936124	1
Name: 2.exe MD5: 89acb7fa1fb9e1c43887c9003a936124 Size: 164.35 KB (164352 bytes) Detections: 1 Type: Executable File Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: March 21, 2013
30.	Wmiproe.exe
Name: Wmiproe.exe Type: Executable File Group: Malware file
31.	WerFaulttSecure.exe
Name: WerFaulttSecure.exe Type: Executable File Group: Malware file
32.	UMSVC.exe
Name: UMSVC.exe Type: Executable File Group: Malware file
33.	TimerLockSetup.exe
Name: TimerLockSetup.exe Type: Executable File Group: Malware file
34.	synsenddrv.sys
Name: synsenddrv.sys Type: System file Group: Malware file
35.	nt32.exe
Name: nt32.exe Type: Executable File Group: Malware file
36.	massdown.exe
Name: massdown.exe Type: Executable File Group: Malware file
37.	keygen.exe
Name: keygen.exe Type: Executable File Group: Malware file
38.	idm.exe
Name: idm.exe Type: Executable File Group: Malware file
39.	genfs.sys
Name: genfs.sys Type: System file Group: Malware file
40.	EagleR.dll
Name: EagleR.dll Type: Dynamic link library Group: Malware file
41.	arpn.exe
Name: arpn.exe Type: Executable File Group: Malware file
42.	AdMunch.exe
Name: AdMunch.exe Type: Executable File Group: Malware file
43.	722442.exe
Name: 722442.exe Type: Executable File Group: Malware file
44.	3850650280.exe
Name: 3850650280.exe Type: Executable File Group: Malware file
45.	0956808474.exe
Name: 0956808474.exe Type: Executable File Group: Malware file
46.	ylglylfwdqcnipflk[1].exe
Name: ylglylfwdqcnipflk[1].exe Type: Executable File Group: Malware file
47.	winlogon.exe
Name: winlogon.exe Type: Executable File Group: Malware file
48.	Wallhack.dll
Name: Wallhack.dll Type: Dynamic link library Group: Malware file
49.	SysAdmin.exe
Name: SysAdmin.exe Type: Executable File Group: Malware file
50.	rvaeptx.exe
Name: rvaeptx.exe Type: Executable File Group: Malware file
51.	mplayer2.exe
Name: mplayer2.exe Type: Executable File Group: Malware file
52.	kkf8lbVHoc.exe
Name: kkf8lbVHoc.exe Type: Executable File Group: Malware file
53.	install_flash_player_iexplorer.exe
Name: install_flash_player_iexplorer.exe Type: Executable File Group: Malware file
54.	cmss.exe
Name: cmss.exe Type: Executable File Group: Malware file
55.	AKVIS_Retrial.exe
Name: AKVIS_Retrial.exe Type: Executable File Group: Malware file
56.	747835661.exe
Name: 747835661.exe Type: Executable File Group: Malware file
57.	49365.exe
Name: 49365.exe Type: Executable File Group: Malware file
58.	1012885.exe
Name: 1012885.exe Type: Executable File Group: Malware file
59.	Z6ZDB09A.EXE
Name: Z6ZDB09A.EXE Type: Executable File Group: Malware file
60.	winscrnv.exe
Name: winscrnv.exe Type: Executable File Group: Malware file
61.	wccnwiz.dll
Name: wccnwiz.dll Type: Dynamic link library Group: Malware file
62.	TrojanHunter.exe
Name: TrojanHunter.exe Type: Executable File Group: Malware file
63.	SZ00F54.EXE
Name: SZ00F54.EXE Type: Executable File Group: Malware file
64.	smssn.exe
Name: smssn.exe Type: Executable File Group: Malware file
65.	LF30XP.sys
Name: LF30XP.sys Type: System file Group: Malware file
66.	issch.exe
Name: issch.exe Type: Executable File Group: Malware file
67.	hxgame-update.exe
Name: hxgame-update.exe Type: Executable File Group: Malware file
68.	configuration.exe
Name: configuration.exe Type: Executable File Group: Malware file
69.	appmgmts.dll
Name: appmgmts.dll Type: Dynamic link library Group: Malware file
70.	89855038.exe
Name: 89855038.exe Type: Executable File Group: Malware file
71.	2845571901.exe
Name: 2845571901.exe Type: Executable File Group: Malware file
72.	094017204.exe
Name: 094017204.exe Type: Executable File Group: Malware file
73.	7ce867b6-b2bf-44f6-bd31-8846361f3bf0_32.avi
Name: 7ce867b6-b2bf-44f6-bd31-8846361f3bf0_32.avi Group: Malware file
74.	wAyJhFIrpwj2b.cpl
Name: wAyJhFIrpwj2b.cpl Group: Malware file

More files

EnigmaSoft’s Payment Processor Digital River GmbH Filing for Bankruptcy Does Not Impact SpyHunter Customers’ Anti-Malware Protection

Search

Change Region

Trojan.Bumat!rts

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Trojan.Bumat!rts

File System Details

Submit Comment

Trending

Bactor Ransomware

Tavonnero.co.in

Turtle Vote Rewards

Most Viewed

How To Fix 'Printer Driver is Unavailable' Error

Discord Is Stuck on Gray Screen

Discord Shows Black Screen when Sharing Screen