PSW.Mefs - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / PSW.Mefs

PSW.Mefs Technical Details

Category

PSW

Discovered

3/13/2008 11:32:00 AM

Modified

3/14/2008 3:12:00 PM

Threat Level

Critical

Description

This family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords.

Summary

The hosts file was updated with the following url-to-ip mappings: n/a
The following http urls were started: n/a
Generated smtp traffic: n/a
Connection(s) established with remote IRC Server: n/a
The following hidden entries created:
The following internet connection was established: n/a

When the PSW is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\svhost32.exe			a2adb698b75ac9582659afd29570f830	52224
..\temp\anyyeisd.dll			499c75d954e7089d03a0231d8ba209e3	20480
..\temp\m.dll			78a5c828ba16bd9a168d4f91b4aeb939	22528
..\temp\tjdt7jyu.dll			d97bdced95c23ba93753a7a5db86563b	22016
..\04c4e764.dll			3b552b16b08842bd76a1d83f1eea16ba	31744
..\2d3cebcc.dll			966da7b590c32aef80f38d5cc30954aa	33792
..\3ce20548.exe			3410914900a9f009d3214a7086edcb56	282112
..\b273fbd6.dll			5a56e8ce84bcaeeee470bc8683ebae4a	22100
..\83a16e72.dll			8104a7518a0cee4e2b24c81d215147fe	33792
..\b7691587.exe			7857041034fa1b4eee9599145bbd565c	49152
..\fb6342da.dll			49116d804e589f2a04732eaff6523d64	22100
..\47f1efbb.dll			4a30c508195597114f7d7c336616fea7	35328
..\ee3b2a2a.dll			e2d67733128f0ace4d7e530d527acb6d	33792
..\efb48de7.dll			be552bd6d70a0a6bf07afb0e45d2db2b	20992
..\06f3eec1.exe			bde3d873dc701f26b7a5ba16930884c8	27869
..\22679df0.exe			6c26725149ae0f015fd29516b76df493	17250
..\2b3719c8.exe			9ab5df060d264016c59b8d6e0c04977e	68096
..\2b83f2f6.exe			80631a337da87e227800d3947a0631ec	78848
..\3b28eaa6.exe			b1d7a68478eac53c9baaeeeef367f06b	65536
..\3d144eff.exe			331fa6f05de0480a8c0c83c490e97c1a	65536
..\3e7d0715.exe			719856544b27c0eef8e534f3962d2530	31224
..\487be422.exe			98e7be66e3f03d8dcfb49e35fdbcc7f7	34482
..\595d75bb.exe			a2adb698b75ac9582659afd29570f830	52224
..\650b70db.exe			58c51c35d4feba180b689c9c6971f4fa	33527
..\6f6b7de5.exe			a90448fa997cdd9b1e38589d74ee1f24	59392

When the PSW is executed, it creates the following Registry entries:

•	..\software\microsoft\windows\currentversion\run\"rr2"

Recommendation to remove PSW.Mefs

Spyware Detector can remove PSW.Mefs, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat