Worm.Randex - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / Worm.Randex

Worm.Randex Technical Details

Category		Worm
Discovered		10/27/2005 12:04:00 PM
Modified		5/3/2008 11:01:00 AM
Threat Level		Medium

Category Description

A Worm is a malicious program that spreads itself without any user intervention. Worms are self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across computer networks via security holes on vulnerable machines connected to the network. Worms can also spread through email by sending copies of itself to everyone in the user's address book. A Worm may consume a large amount of system resources and cause the machine to become noticeably sluggish and unreliable.

Notice

Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically in our Research Lab as a result of executing Spyware Files or browsing Internet. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Software.

We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Summary

The following http urls were started: NA

The hosts file was updated with the following url-to-ip mappings: NA

The following internet connection was established:

64.62.140.73 : 6532

The following Files were created:

Name	Version	Publisher	Signature (MD5)	File Size (in KB)
..\java\winlogin.exe			c7352e38a86db79d2401f098a4e1ec48
..\spolds.exe
..\f12b2cea.exe			63a1e2c5b0010eb07a6091f2339f1908
..\netd32.exe			cefbc4432445d11a71aab8f28a6309f9
..\amqj.exe
..\3d3323c2.exe			cefbc4432445d11a71aab8f28a6309f9
..\msmsgri32.exe
..\ac65605d.exe			2a62e8314bf6aa16ed118384e7d8ef77
..\8e25f712.exe			1fc1c40dc125bf4728dccfb19e68561b
..\scvhost.exe
..\msmonk32.exe
..\musirc4.71.exe
..\0d887d87.exe			ffdc1ec496221db487c3bd4fb66181c4

The following Registry Entries were created:

•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows NT 32"\"ntlogin32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"postdavatch"\"nvdas.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"System executable dll library"\"execdll32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft Internet firewall manager"\"gmt16.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft spool server for win32"\"spoolsrv.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"ms_netd_win32"\"netd32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"regsrv"\"scvhost.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows mangement"\"Winlogonn.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"pofatch"\"nstrue.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"rcf driver"\"rcf.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"metalrock has sex with camels"\"metalrock-is-gay.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft runtime"\"cfgdll32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"ms configuration"\"msframer.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"ms-update"\"scvhost.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Windows loader"\"wstart32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"casdvqwa"\"bmqnzkg.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"randex virus built for irbme"\"irbme.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"metalrock (irc.musirc.com) has sex with printers"\"metalrock-is-gay.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"Microsoft netview"\"gesfm32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"threaded"\"intcp32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"helpmanager"
•	..\Software\Microsoft\Windows\CurrentVersion\RunServices\\"System time updator"\"csystime.exe"
•	..\System\CurrentControlSet\Services\Indexingboxs
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"superslut"\"msslut32.exe"
•	..\Software\Microsoft\Windows\CurrentVersion\Run\\"postpatch"\"nvdes.exe"

Recommendation to remove Worm.Randex

Spyware Detector can remove Worm.Randex, and thousands of other Spyware automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized E-mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.
	Speed up your computer and increase browsing performance by deleting Spyware & Adware
	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.
	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat