PSW.Lmir - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / PSW.Lmir

PSW.Lmir Technical Details

Category

PSW

Discovered

3/12/2008 3:38:00 PM

Modified

3/12/2008 6:00:00 PM

Threat Level

Critical

Description

This family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords.

Summary

The hosts file was updated with the following url-to-ip mappings:
127.0.0.1 www.
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created: n/a
The following internet connection was established:
68.178.211.72:3197(winhostecn72.prod.mesa1.secureserver.net)

When the PSW is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\3721.dll			05a8222ae0f93e5d03203d1da5bc8c59	91648
..\3721.exe			d1700a12f65723272a35b9a6f8cdfc9e	59492
..\temp\win1.exe			10197a69c04578fd80ff12aba2bbe4a2	16384
..\f13390af.exe			9311d52dcd5854b35a1a1c622adb7014
..\d113ecb1.exe			4913c221a63180314589927d2256f8e4
..\1f01af1a.dll			e8d057df379cb7e2021179c2cbf65e4e
..\015abdab.exe			61e0401ffeab3f50e50c1ea5972e7722
..\03c51a8a.exe			05ea518a81accaa34754e6cb17e22243
..\16a1ccc0.exe			019753bd334d70d1bff3c8eac6b746c7
..\5e889d95.dll			e9b4aa73d2057180e3b442611e92ac95
..\6a24b9e8.dll			573ea50b219bf2f670cbef6732ecf227
..\6efb7356.dll			dce2f30f12f186f8946d6274d6d24b64
..\95288b4d.exe			dce6c0ffe922f8933561ed83c5b5b043
..\95517941.dll			a61209461dc2a11c6b4a1a5e1f0d1ef8
..\bddc7db2.dll			95470c30303e98b109b04523b85b2da3
..\d6ee5b0f.dll			8bd9fd7ee00026e43922a379c74d3a53
..\dda785fe.dll			af32a7a6618efa32de023dcdbe7c0994
..\e1109911.exe			e078aa8e9b7e2212cec7bb114202690b
..\f3838e4b.dll			f4bad77fcea10ae66e40c00ff0733359
..\401452d4.dll			b13008abbeffa34172a618a393e4837d
..\49458ae6.dll			d888482a9959c1b5ed874acbff90a125
..\d27100df.dll			e729baba967886ff6e15cbd6c0713854
..\21a94643.dll			5f18e3fb8c7b8f85afa7b3264590a8fc
..\629e77e0.exe			4d6c1f856bc4539e607437700520c9d7
..\b2ac9eae.dll			aa3533c670318fff9796e5c4328e10cc

When the PSW is executed, it creates the following Registry entries:

•	..\software\microsoft\windows\currentversion\policies\explorer\run\"222"
•	..\software\microsoft\windows\currentversion\run\"cs_4"
•	..\software\microsoft\windows\currentversion\run\"nooncerun"
•	..\software\microsoft\windows\currentversion\run\"soundmana"

Recommendation to remove PSW.Lmir

Spyware Detector can remove PSW.Lmir, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat