Trojan.Nedsym

By GoldSparrow in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	2,758

First Seen:	January 26, 2012
Last Seen:	August 9, 2020
OS(es) Affected:	Windows

Trojan.Nedsym is a harnful Trojan that propagates via spam emails. Trojan.Nedsym is a serious threat to your PC system and personal security. Trojan.Nedsym can also collect data about your computer system and forward it to a remote server that is responsible for configuring Trojan.Nedsym. Trojan.Nedsym modifies the registry during the installation so that it could run automatically each time you turn on your computer. Then Trojan.Nedsym checks whether there's another version of a Trojan installed in the machine, and if not, it starts performing its damaging actions. At first, Trojan.Nedsym enters the registry key that belongs to Internet Explorer and steals all the user names and passwords collected in there. Thus, Trojan.Nedsym can obtain an access to the frequently visited web pages. Trojan.Nedsym also targets other web browser that include Mozilla Firefox and others. Trojan.Nedsym connects to a remote server without your consent and receives configuration data about what type of spam messages it has to send. Trojan.Nedsym can create a random domain name, and then it might use one of several names to forward and access information from its external server. Find a genuine malware removal program to completely remove Trojan.Nedsym.

Table of Contents

SpyHunter Detects & Remove Trojan.Nedsym

File System Details

Trojan.Nedsym may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	WMPRWISE.EXE	5d550016cffc92b1a6b425a89c005e52	138
Name: WMPRWISE.EXE MD5: 5d550016cffc92b1a6b425a89c005e52 Size: 321.53 KB (321536 bytes) Detections: 138 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
2.	WMPRWISE.EXE	3a0f6670bc3ec84041a95efbe08028e3	138
Name: WMPRWISE.EXE MD5: 3a0f6670bc3ec84041a95efbe08028e3 Size: 373.76 KB (373760 bytes) Detections: 138 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: May 30, 2020
3.	WMPRWISE.EXE	59358ac3338f97ec65675dbf9e386d8f	130
Name: WMPRWISE.EXE MD5: 59358ac3338f97ec65675dbf9e386d8f Size: 280.06 KB (280064 bytes) Detections: 130 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
4.	WMPRWISE.EXE	ea001cd03e37bbbf916d88122bf21047	122
Name: WMPRWISE.EXE MD5: ea001cd03e37bbbf916d88122bf21047 Size: 415.23 KB (415232 bytes) Detections: 122 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
5.	WMPRWISE.EXE	f0f8d22cb5714bfa1160d25188a7639a	104
Name: WMPRWISE.EXE MD5: f0f8d22cb5714bfa1160d25188a7639a Size: 331.26 KB (331264 bytes) Detections: 104 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
6.	WMPRWISE.EXE	d2505f3201ae659d9626c3060a443d66	73
Name: WMPRWISE.EXE MD5: d2505f3201ae659d9626c3060a443d66 Size: 181.24 KB (181248 bytes) Detections: 73 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
7.	WMPRWISE.EXE	d7f0098691ba70cfb4be3144df2c6ca9	68
Name: WMPRWISE.EXE MD5: d7f0098691ba70cfb4be3144df2c6ca9 Size: 366.59 KB (366592 bytes) Detections: 68 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
8.	WMPRWISE.EXE	d60fa017c93fd102f7d4bbf16667ad99	63
Name: WMPRWISE.EXE MD5: d60fa017c93fd102f7d4bbf16667ad99 Size: 382.97 KB (382976 bytes) Detections: 63 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
9.	WMPRWISE.EXE	047c95b56f1972b0653a4f3ad48b2fff	47
Name: WMPRWISE.EXE MD5: 047c95b56f1972b0653a4f3ad48b2fff Size: 197.89 KB (197893 bytes) Detections: 47 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
10.	WMPRWISE.EXE	89b495dcac6b04896f1c7d3a77d43e02	46
Name: WMPRWISE.EXE MD5: 89b495dcac6b04896f1c7d3a77d43e02 Size: 216.6 KB (216601 bytes) Detections: 46 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
11.	wmprwise.exe	61f3ffdd29fc13a9356efeef96ad048a	42
Name: wmprwise.exe MD5: 61f3ffdd29fc13a9356efeef96ad048a Size: 244.22 KB (244224 bytes) Detections: 42 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
12.	wmprwise.exe	ff2c908692dab3c715d1ee338a89ccb5	37
Name: wmprwise.exe MD5: ff2c908692dab3c715d1ee338a89ccb5 Size: 236.03 KB (236032 bytes) Detections: 37 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
13.	WMPRWISE.EXE	060d2dc37fceb19032836909999df7ca	35
Name: WMPRWISE.EXE MD5: 060d2dc37fceb19032836909999df7ca Size: 326.65 KB (326656 bytes) Detections: 35 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 1, 2019
14.	WMPRWISE.EXE	af7466d408331583f7313bf92c34675c	33
Name: WMPRWISE.EXE MD5: af7466d408331583f7313bf92c34675c Size: 173.3 KB (173304 bytes) Detections: 33 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
15.	WMPRWISE.EXE	4228dbad7fb2451f214c2d2ca8b3eec4	25
Name: WMPRWISE.EXE MD5: 4228dbad7fb2451f214c2d2ca8b3eec4 Size: 237.89 KB (237893 bytes) Detections: 25 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
16.	WMPRWISE.EXE	5504c93122d86f5a31ea9082acdbead7	23
Name: WMPRWISE.EXE MD5: 5504c93122d86f5a31ea9082acdbead7 Size: 275.45 KB (275456 bytes) Detections: 23 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
17.	WMPRWISE.EXE	2d697cf8ae4f3ff57895055c5393964b	21
Name: WMPRWISE.EXE MD5: 2d697cf8ae4f3ff57895055c5393964b Size: 197.12 KB (197120 bytes) Detections: 21 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
18.	WMPRWISE.EXE	bb0cac401b4d6dd31bea8f410d41ef4d	20
Name: WMPRWISE.EXE MD5: bb0cac401b4d6dd31bea8f410d41ef4d Size: 176.12 KB (176128 bytes) Detections: 20 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
19.	WMPRWISE.EXE	4e9c5aadaa6f89e7af7ad44e05dab926	18
Name: WMPRWISE.EXE MD5: 4e9c5aadaa6f89e7af7ad44e05dab926 Size: 140.52 KB (140526 bytes) Detections: 18 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
20.	wmprwise.exe	950c638b7da81aaefdc09c4e70dc3557	16
Name: wmprwise.exe MD5: 950c638b7da81aaefdc09c4e70dc3557 Size: 156.93 KB (156934 bytes) Detections: 16 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
21.	WMPRWISE.EXE	776fb555c823272cecdb729cbe9c1169	14
Name: WMPRWISE.EXE MD5: 776fb555c823272cecdb729cbe9c1169 Size: 94.72 KB (94720 bytes) Detections: 14 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
22.	WMPRWISE.EXE	99a9cab2a91d5d307710aac99fa31390	14
Name: WMPRWISE.EXE MD5: 99a9cab2a91d5d307710aac99fa31390 Size: 372.73 KB (372736 bytes) Detections: 14 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: June 11, 2020
23.	wmprwise.exe	9438a1dcea700922a9a3641c0c41bfa8	14
Name: wmprwise.exe MD5: 9438a1dcea700922a9a3641c0c41bfa8 Size: 238.59 KB (238592 bytes) Detections: 14 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
24.	WMPRWISE.EXE	c7c9aebe3d778a89c50091acaef7e8c8	14
Name: WMPRWISE.EXE MD5: c7c9aebe3d778a89c50091acaef7e8c8 Size: 268.8 KB (268800 bytes) Detections: 14 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: December 26, 2018
25.	WMPRWISE.EXE	91bfc67bede3bcd0379e2baa72a204e2	13
Name: WMPRWISE.EXE MD5: 91bfc67bede3bcd0379e2baa72a204e2 Size: 416.25 KB (416256 bytes) Detections: 13 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
26.	WMPRWISE.EXE	e4b23b0b8502cc916c855aad4b0de3a4	13
Name: WMPRWISE.EXE MD5: e4b23b0b8502cc916c855aad4b0de3a4 Size: 158.2 KB (158208 bytes) Detections: 13 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: April 30, 2016
27.	cf.dll
Name: cf.dll Type: Dynamic link library Group: Malware file
28.	jan.dll
Name: jan.dll Type: Dynamic link library Group: Malware file
29.	RegalRO.exe
Name: RegalRO.exe Type: Executable File Group: Malware file
30.	upd_debug.exe
Name: upd_debug.exe Type: Executable File Group: Malware file
31.	windows update.exe
Name: windows update.exe Type: Executable File Group: Malware file
32.	credman.dll
Name: credman.dll Type: Dynamic link library Group: Malware file
33.	svcnost.exe
Name: svcnost.exe Type: Executable File Group: Malware file
34.	kbdcr32.dll
Name: kbdcr32.dll Type: Dynamic link library Group: Malware file
35.	svcserv.exe
Name: svcserv.exe Type: Executable File Group: Malware file
36.	AdobeUpdate.exe
Name: AdobeUpdate.exe Type: Executable File Group: Malware file
37.	3x2ua64.com
Name: 3x2ua64.com Type: Command, executable file Group: Malware file
38.	itlnfw32.dll
Name: itlnfw32.dll Type: Dynamic link library Group: Malware file
39.	FW-267279124.exe
Name: FW-267279124.exe Type: Executable File Group: Malware file
40.	atl(4)32.dll
Name: atl(4)32.dll Type: Dynamic link library Group: Malware file
41.	GoogleDownload.exe
Name: GoogleDownload.exe Type: Executable File Group: Malware file
42.	api-ms-win-core-memory-l1-1-032.dll
Name: api-ms-win-core-memory-l1-1-032.dll Type: Dynamic link library Group: Malware file
43.	svchost.exe
Name: svchost.exe Type: Executable File Group: Malware file
44.	qtplugin.exe
Name: qtplugin.exe Type: Executable File Group: Malware file
45.	pf10373.dll
Name: pf10373.dll Type: Dynamic link library Group: Malware file
46.	ucrtupd.exe
Name: ucrtupd.exe Type: Executable File Group: Malware file

More files

Registry Details

Trojan.Nedsym may create the following registry entry or registry entries:

Regexp file mask

%APPDATA%\WMPRWISE.EXE

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan.Nedsym

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Trojan.Nedsym

File System Details

Registry Details

Submit Comment

Related Posts

Trojan.Nedsym.H

Trojan.Nedsym.C

Trojan.Nedsym.F

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen