Threat Database Worms W32/Rimecud

W32/Rimecud

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 157
First Seen: November 30, 2010
OS(es) Affected: Windows

W32/Rimecud is a computer worm that spreads via removal USB drives, Yahoo, MSN Messenger, file-sharing networks and other shared network resources. W32/Rimecud injects a malicious code on explorer.exe to run on an infected computer. Use a updated malware remover to terminate W32/Rimecud as soon as it has been detected.

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software Detection
Panda W32/Autorun.JLR
Fortinet W32/Injector.HMH!tr
TrendMicro WORM_KOLAB.SMF
Sophos Mal/EncPk-ACW
K7AntiVirus Trojan
CAT-QuickHeal Trojan.Refroso.ndx.n4
Panda Trj/Zlob.KH
Fortinet W32/CodecPack.KOH!tr.dldr
AhnLab-V3 Win32/Palevo.worm.251911.B
eTrust-Vet Win32/ASuspect.HAEGG
AntiVir TR/Injector.tpc
Comodo TrojWare.Win32.Injector.AUS
ClamAV Trojan.Downloader-88636
eSafe Win32.Inject.Wn
Avast Win32:Inject-YC

SpyHunter Detects & Remove W32/Rimecud

File System Details

W32/Rimecud may create the following file(s):
# File Name MD5 Detections
1. yv8g67.exe 94863eb254c5c4dc9736ead9b94d1972 133
2. MsMxEng.exe e350d67a2c4e6c46e81966b2b29820be 15
3. schl.exe 4b2cddb2545b9e6c03953a94388ac722 4
4. schl.exe 006cffad064beeaddc277c34e9e97b9f 2
5. MsMxEng.exe 28fc457b0869713a2690e41e5609d82c 1
6. MsMxEng.exe c9139d1f65b7f57590ee31d7ba0aa99d 1
7. twain_x86.exe efd75a8e2a70d9fd157b558b3ea90c00 1

Related Posts

Trending

Most Viewed

Loading...