Home Malware Programs Trojans PWSteal.Fareit.gen!I

PWSteal.Fareit.gen!I

Posted: January 28, 2013

Threat Metric

Threat Level: 8/10
Infected PCs: 365
First Seen: January 28, 2013
OS(es) Affected: Windows

Aliases

PSW.Generic10.BKPC [AVG]Trojan/Win32.Agent [AhnLab-V3]Mal/Zbot-KN [Sophos]TR/Rogue.kdz.5134 [AntiVir]Trojan-PSW.Win32.Tepfer.etip [Kaspersky]Win32:LockScreen-QE [Trj] [Avast]Trojan.Ransomlock!g36 [Symantec]Ransom!9E81F2914F7C [McAfee]Generic31.AGWR [AVG]TR/Zusy.33900.4 [AntiVir]Trojan.Win32.Jorik.Fareit.asm [Kaspersky]Ransom-FAXT!B8638376E1D5 [McAfee]TrojWare.Win32.Kryptik.ARJU [Comodo]Gen:Variant.Zusy.33900 [BitDefender]Trojan-PSW.Win32.Tepfer.ewsm [Kaspersky]
More aliases (130)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 162.29 KB (162296 bytes)
MD5: 8acf6add7ac04f0fcae986fd2b2e18c3
Detection count: 110
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: January 28, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 132.09 KB (132096 bytes)
MD5: 4e407ead6efd84dcbc13a132cb4f7290
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: January 29, 2013
%APPDATA%\csrsss.exe File name: csrsss.exe
Size: 130.04 KB (130048 bytes)
MD5: ab58e2ddeb224c6f4251b3b4fbdb1ddf
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%
Group: Malware file
Last Updated: February 22, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 127.48 KB (127480 bytes)
MD5: 505be58b993a1f9b7656784bde35e851
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: February 14, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 139.25 KB (139256 bytes)
MD5: 9e81f2914f7c5150f0a46493144e11ba
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: April 29, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 165.36 KB (165368 bytes)
MD5: 975112e46121ddf8322f9c76ddfaaa14
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: February 6, 2013
%USERPROFILE% Andrews\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 165.36 KB (165368 bytes)
MD5: 2660247fa1e14aa70dee91560519d091
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE% Andrews\AppData\Roaming
Group: Malware file
Last Updated: February 11, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 165.36 KB (165368 bytes)
MD5: cd441ea8e2440a506229a63468b7c992
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: February 11, 2013
%SystemDrive%\Users\<username>\AppData\Roaming\csrsss.exe File name: csrsss.exe
Size: 143.87 KB (143872 bytes)
MD5: b8638376e1d5b5491fffd102be9802f1
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming
Group: Malware file
Last Updated: March 1, 2013
Loading...