Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus downloadAnti Spyware Software
Spyware Detector - HomeSpyware Detector - PurchaseSpyware Detector - AffiliatesSpyware Detector - Download UpdatesSpyware Detector -FAQSpyware Detector -Contact Us

Home/ Spyware Encyclopedia / PSW.Lmir

 PSW.Lmir Technical Details
 CategoryPSW
 Discovered 3/12/2008 3:38:00 PM
 Modified 3/12/2008 6:00:00 PM
 Threat LevelCritical
 DescriptionThis family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords.
 SummaryThe hosts file was updated with the following url-to-ip mappings:
127.0.0.1 www.
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established:
68.178.211.72:3197(winhostecn72.prod.mesa1.secureserver.net)
 When the PSW is executed, it creates the following files:
 
NameVersionPublisherSignature (MD5)File Size (in Bytes)
..\3721.dll  05a8222ae0f93e5d03203d1da5bc8c5991648
..\3721.exe  d1700a12f65723272a35b9a6f8cdfc9e59492
..\temp\win1.exe  10197a69c04578fd80ff12aba2bbe4a216384
..\f13390af.exe  9311d52dcd5854b35a1a1c622adb7014 
..\d113ecb1.exe  4913c221a63180314589927d2256f8e4 
..\1f01af1a.dll  e8d057df379cb7e2021179c2cbf65e4e 
..\015abdab.exe  61e0401ffeab3f50e50c1ea5972e7722 
..\03c51a8a.exe  05ea518a81accaa34754e6cb17e22243 
..\16a1ccc0.exe  019753bd334d70d1bff3c8eac6b746c7 
..\5e889d95.dll  e9b4aa73d2057180e3b442611e92ac95 
..\6a24b9e8.dll  573ea50b219bf2f670cbef6732ecf227 
..\6efb7356.dll  dce2f30f12f186f8946d6274d6d24b64 
..\95288b4d.exe  dce6c0ffe922f8933561ed83c5b5b043 
..\95517941.dll  a61209461dc2a11c6b4a1a5e1f0d1ef8 
..\bddc7db2.dll  95470c30303e98b109b04523b85b2da3 
..\d6ee5b0f.dll  8bd9fd7ee00026e43922a379c74d3a53 
..\dda785fe.dll  af32a7a6618efa32de023dcdbe7c0994 
..\e1109911.exe  e078aa8e9b7e2212cec7bb114202690b 
..\f3838e4b.dll  f4bad77fcea10ae66e40c00ff0733359 
..\401452d4.dll  b13008abbeffa34172a618a393e4837d 
..\49458ae6.dll  d888482a9959c1b5ed874acbff90a125 
..\d27100df.dll  e729baba967886ff6e15cbd6c0713854 
..\21a94643.dll  5f18e3fb8c7b8f85afa7b3264590a8fc 
..\629e77e0.exe  4d6c1f856bc4539e607437700520c9d7 
..\b2ac9eae.dll  aa3533c670318fff9796e5c4328e10cc 

 When the PSW is executed, it creates the following Registry entries:
 
..\software\microsoft\windows\currentversion\policies\explorer\run\"222"
..\software\microsoft\windows\currentversion\run\"cs_4"
..\software\microsoft\windows\currentversion\run\"nooncerun"
..\software\microsoft\windows\currentversion\run\"soundmana"

Recommendation to remove PSW.Lmir
Spyware Detector can remove PSW.Lmir, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.
Download Spyware Detector and Scan for FREE
 
Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback. 
Speed up your computer and increase browsing performance by deleting Spyware & Adware
Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.
 
Free Spyware Scan
 Search Threats
Testimonials

Read More
Information Desk
Spyware & Adware Categories we scan
  
List of Spyware &
Adware we remove
Submit a Threat
Submit a threat to be reviewed by our research team

Submit a Threat