Worm.Autorun.ZI

By CagedTech in Worms

Threat Scorecard

Threat Level:	50 % (Medium)
Infected Computers:	1,160

First Seen:	December 12, 2011
Last Seen:	October 3, 2022
OS(es) Affected:	Windows

Aliases

15 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	SHeur4.PDE
Fortinet	Riskware/Kiser
AntiVir	SPR/Kiser.ats
Kaspersky	HackTool.Win32.Kiser.ats
eTrust-Vet	Win32/Cycbot.KD!generic
DrWeb	BackDoor.Gbot.1505
Sophos	Troj/CycBot-R
BitDefender	Gen:Variant.Kazy.48467
Avast	Win32:Cycbot-PM [Trj]
NOD32	a variant of Win32/Kryptik.XGT
Fortinet	Riskware/NirCmd
Sophos	NirCmd
McAfee	Tool-NirCmd
AVG	Hider.OOS
GData	Win32:Alureon-AOW

File System Details

Worm.Autorun.ZI may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	MPKView.exe	19349bcaeee80c65d8e8f428bb84bffc	48
Name: MPKView.exe MD5: 19349bcaeee80c65d8e8f428bb84bffc Size: 2.98 MB (2988032 bytes) Detections: 48 Type: Executable File Path: C:\Windows\SysWOW64\MPK\MPKView.exe Group: Malware file Last Updated: October 19, 2021
2.	ComboFix.exe	6b75abe9a95b4952021c68f08cc606fa	15
Name: ComboFix.exe MD5: 6b75abe9a95b4952021c68f08cc606fa Size: 4.33 MB (4337189 bytes) Detections: 15 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\Desktop\New greene\Documents\ComboFix.exe Group: Malware file Last Updated: January 10, 2022
3.	AB6.exe	bd321bf5257de1447bd814998bfea06e	14
Name: AB6.exe MD5: bd321bf5257de1447bd814998bfea06e Size: 316.41 KB (316416 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\Microsoft\9A1F Group: Malware file Last Updated: December 14, 2011
4.	tMfQnhnjewmTtoH.exe	a2dac138addb365e53b7894a75c31c47	10
Name: tMfQnhnjewmTtoH.exe MD5: a2dac138addb365e53b7894a75c31c47 Size: 457.72 KB (457728 bytes) Detections: 10 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 14, 2011
5.	ComboFix.exe	d966b4c230f7ffa8ef453cadc53559fe	9
Name: ComboFix.exe MD5: d966b4c230f7ffa8ef453cadc53559fe Size: 4.33 MB (4331207 bytes) Detections: 9 Type: Executable File Path: C:\Users\<username>\Downloads\ComboFix.exe Group: Malware file Last Updated: February 13, 2023
6.	stpass.exe	8aa356d59a632a2eaf2df740b18637f1	9
Name: stpass.exe MD5: 8aa356d59a632a2eaf2df740b18637f1 Size: 2.78 MB (2786648 bytes) Detections: 9 Type: Executable File Path: %PROGRAMFILES%\Sticky Password Group: Malware file Last Updated: June 15, 2020
7.	YPfdbKQmYWnOqAL.exe	dce1650b61a4c86210f60f333fa0068a	8
Name: YPfdbKQmYWnOqAL.exe MD5: dce1650b61a4c86210f60f333fa0068a Size: 465.92 KB (465920 bytes) Detections: 8 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 14, 2011
8.	bmhost.exe	4927db0e11d1f1d48430ea6230d9b777	7
Name: bmhost.exe MD5: 4927db0e11d1f1d48430ea6230d9b777 Size: 253.95 KB (253952 bytes) Detections: 7 Type: Executable File Path: %USERPROFILE% Group: Malware file Last Updated: December 13, 2011
9.	lvvm.exe	fddc426fb990b95e75524d58cc4aa6f0	7
Name: lvvm.exe MD5: fddc426fb990b95e75524d58cc4aa6f0 Size: 215.04 KB (215040 bytes) Detections: 7 Type: Executable File Path: %APPDATA%\36AA3 Group: Malware file Last Updated: December 14, 2011
10.	fUOfWDexaNHOBg.exe	c3985f7feae897e1f851d4a155fe35d2	6
Name: fUOfWDexaNHOBg.exe MD5: c3985f7feae897e1f851d4a155fe35d2 Size: 468.99 KB (468992 bytes) Detections: 6 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 13, 2011
11.	xmlprw32.dll	b252a66a4d86eacad1492a4f5806a986	6
Name: xmlprw32.dll MD5: b252a66a4d86eacad1492a4f5806a986 Size: 156.67 KB (156672 bytes) Detections: 6 Type: Dynamic link library Path: %WINDIR%\system32 Group: Malware file Last Updated: December 13, 2011
12.	netbt.sys	b3d7f440fb5c4f0489881162b3cc99dd	6
Name: netbt.sys MD5: b3d7f440fb5c4f0489881162b3cc99dd Size: 187.9 KB (187904 bytes) Detections: 6 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 13, 2011
13.	WinDefender.exe	8e759ace76824232f54da716547ed66d	4
Name: WinDefender.exe MD5: 8e759ace76824232f54da716547ed66d Size: 180.22 KB (180224 bytes) Detections: 4 Type: Executable File Path: %APPDATA% Group: Malware file Last Updated: December 12, 2011
14.	cdrom.sys	559df4fb4bcd2114568d4caea483d29a	2
Name: cdrom.sys MD5: 559df4fb4bcd2114568d4caea483d29a Size: 49.53 KB (49536 bytes) Detections: 2 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 13, 2011
15.	60DA8.exe	d7668867ffb7b3eec7f2188ce79d1122	2
Name: 60DA8.exe MD5: d7668867ffb7b3eec7f2188ce79d1122 Size: 178.17 KB (178176 bytes) Detections: 2 Type: Executable File Path: %APPDATA%\709E3 Group: Malware file Last Updated: December 18, 2011
16.	thpm4230316309100063979.tmp	c257f29b8457565b4a5482b12d1bbd12	1
Name: thpm4230316309100063979.tmp MD5: c257f29b8457565b4a5482b12d1bbd12 Size: 120.32 KB (120320 bytes) Detections: 1 Type: Temporary File Path: %TEMP% Group: Malware file Last Updated: December 13, 2011
17.	gGoRaLwOHp2vcb.exe	9a13caeb009a8a8d852a663a39f08201	1
Name: gGoRaLwOHp2vcb.exe MD5: 9a13caeb009a8a8d852a663a39f08201 Size: 374.78 KB (374784 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 13, 2011
18.	7FC.exe	992710d90eb851514c8f7c4fc42e9254	1
Name: 7FC.exe MD5: 992710d90eb851514c8f7c4fc42e9254 Size: 289.79 KB (289792 bytes) Detections: 1 Type: Executable File Path: %PROGRAMFILES(x86)%\LP\1FFB Group: Malware file Last Updated: December 14, 2011
19.	LhZ47ZN0LkjNp8.exe	a032f4acb505bad8f13ef49d378d49c8	1
Name: LhZ47ZN0LkjNp8.exe MD5: a032f4acb505bad8f13ef49d378d49c8 Size: 352.9 KB (352904 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 13, 2011
20.	oKGUvxjzUCiQ4v.exe	68d40345c7407885a55f20a9c0ffc354	1
Name: oKGUvxjzUCiQ4v.exe MD5: 68d40345c7407885a55f20a9c0ffc354 Size: 369.66 KB (369664 bytes) Detections: 1 Type: Executable File Path: %ALLUSERSPROFILE%\Application Data Group: Malware file Last Updated: December 14, 2011
21.	ComboFix.exe	f491c076b7947fd327ea6d81774fe8e5	1
Name: ComboFix.exe MD5: f491c076b7947fd327ea6d81774fe8e5 Size: 4.33 MB (4333452 bytes) Detections: 1 Type: Executable File Path: %USERPROFILE%\Desktop Group: Malware file Last Updated: December 18, 2011
22.	netbt.sys	7cbf94b84e6025b4d265e6a6fba1f359	1
Name: netbt.sys MD5: 7cbf94b84e6025b4d265e6a6fba1f359 Size: 162.81 KB (162816 bytes) Detections: 1 Type: System file Path: %WINDIR%\System32\drivers Group: Malware file Last Updated: December 14, 2011

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Worm.Autorun.ZI

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

File System Details

Submit Comment

Trending

Gemheartartisan.top

ZeroGuard Ransomware

FilterAdmin

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?