Wowcraft Keylogger - PrivacyAnywhere Spyware Research Library


	Home / Research


	Wowcraft

Details of the Wowcraft are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	Wowcraft
Type:	Keylogger
Risk:
Description:	Trojan.PSW.Wowcraft attempts to steal an online game World Of Warcraft's password on the machine it infected.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Running Processes:

explorer.exe
ms.exe
svch0st.exe
svch0st.exe
0417777b.exe
04d725cd.exe
332002b8.exe
3ad98db3.exe
3ebfa276.exe
519642cf.exe
5edfd4d5.exe
6d8db503.exe
880023d5.exe
a.exe
a91f3182.exe
c171f66e.exe
f3728457.exe
fe1199da.exe
6c797d85c.exe$
c9bc0c43c.exe$
25fb290ec.exe$
96755e35c.exe$
e6e0881ec.exe$
6dd371c6c.exe$
ae5936dac.exe$
e6420d7fc.exe$
a26563dec.exe$
ad45d335c.exe$
0aca4626c.exe$
0f6fccfac.exe$
a722b041c.exe$
93f0c109c.exe$
0f6235dec.exe$
cdfbecb1c.exe$
deaec996c.exe$
c1f9d715c.exe$
c8ebfed7c.exe$
7484e021c.exe$
57eb10fec.exe$
a722b041c.exe$
634ba214c.exe$
3998f8c7c.exe$
ea376bddc.exe$
a1579bfbc.exe$
33eb1657c.exe$
2be35a7ac.exe$
f20983fdc.exe$
aa2b8d09c.exe$
4fe1cb68c.exe$
9c10a9a9c.exe$
1791b3d9c.exe$
876a0abac.exe$
a722b041c.exe$
6a7b74c9c.exe$
0950e5dec.exe$
64e2ee23c.exe$
ff4de9dac.exe$
abe0fd83c.exe$
27db318bc.exe$
af17c436c.exe$
da8c404dc.exe$
c5f9dacbc.exe$
1d05aea1c.exe$
f7dcec31c.exe$
d9a782e6c.exe$
b65c8698c.exe$
d68048a6c.exe$
00000000c.exe$
58cc6213c.exe$
d41b7bf1c.exe$
8b32a049c.exe$
f320eeb8c.exe$
a87dec2dc.exe$
9c10a9a9c.exe$
54399a1ac.exe$
2be35a7ac.exe$
2be35a7ac.exe$
30b82ca1c.exe$
4fa8afd4c.exe$
1a3be7f4c.exe$
94a17848c.exe$
381a8283c.exe$
96f662d0c.exe$
144d9207c.exe$
e9dfb00bc.exe$
e20f2545c.exe$
cf5a641cc.exe$
5d826c7bc.exe$
b4687b05c.exe$
d423fe78c.exe$
8526497ec.exe$
9c10a9a9c.exe$
c1f9d715c.exe$
768c1853c.exe$
950e378fc.exe$
e0a27690c.exe$
76ffeeffc.exe$
0916f324c.exe$
4e1551bfc.exe$
d2b80dd1c.exe$
f085b2c4c.exe$
75786c12c.exe$
6ce91c5ec.exe$
52579c71c.exe$
7b8438c7c.exe$
ebadf28fc.exe$
466f4b4ac.exe$
4c5632e2c.exe$
09c2906bc.exe$
348d7402c.exe$
9c10a9a9c.exe$
9cc9bde3c.exe$
6a9a2898c.exe$
03c12e5ac.exe$
6debd83cc.exe$
87b67ac2c.exe$
2ca682b3c.exe$
37123c06c.exe$
6f5fd6f2c.exe$
3ef499f6c.exe$
92afa673c.exe$
20829522c.exe$
f76cb350.exe
8ada3ee4.exe

Files:

systemroot+\system32\wow.dll
systemroot+\system32\dllzt.sls
%root%\micknewwowtro\micknewwowtro.dll
explorer.exe
ms.exe
svch0st.exe
svch0st.exe
systemlm.dll
0417777b.exe
04d725cd.exe
332002b8.exe
3ad98db3.exe
3ebfa276.exe
519642cf.exe
5edfd4d5.exe
6d8db503.exe
880023d5.exe
a.exe
a91f3182.exe
c171f66e.exe
f3728457.exe
fe1199da.exe
kb494002.log
2d82c7d0c.$
54798f90c.dll$
6c797d85c.exe$
c412cfb8c.bin$
01a3d88cc.bin$
c9bc0c43c.exe$
25fb290ec.exe$
96755e35c.exe$
c81cda35c.com$
e6e0881ec.exe$
27db318bc.bin$
df7363e0c.bin$
6dd371c6c.exe$
ab99c2a6c.$
7f38f938c.$
180fd755c.$
ae5936dac.exe$
e6420d7fc.exe$
dcb33002c.bin$
a26563dec.exe$
9380159ac.bin$
f00850f6c.pws$
0d561362c.pws$
bbf22a4cc.$
ad45d335c.exe$
ed60250ac.$
0aca4626c.exe$
0f6fccfac.exe$
a722b041c.exe$
93f0c109c.exe$
7379bcbfc.bin$
0f6235dec.exe$
57b549cdc.$
59846186c.$
88ced490c.$
cdfbecb1c.exe$
deaec996c.exe$
591e9050c.$
b5f89f10c.bin$
3f30a1aec.bin$
383ba4e5c.bin$
c1f9d715c.exe$
c8ebfed7c.exe$
06367a64c.bin$
d291cef7c.sys$
7484e021c.exe$
70cdaf4dc.$
57eb10fec.exe$
a722b041c.exe$
a0ae4c56c.com$
634ba214c.exe$
3998f8c7c.exe$
2f98c531c.$$$
51fb9581c.exw$
72181212c.$
ea376bddc.exe$
4f7300ebc.dll$
a1579bfbc.exe$
33eb1657c.exe$
5c97b04dc.$
f99e8854c.$$
9f6e4b93c.$
2be35a7ac.exe$
c41fce8ac.$
0d76e7a8c.$
d16f471fc.$
46723906c.bin$
f20983fdc.exe$
34040921c.bin$
aa2b8d09c.exe$
7875d4e8c.$
daec768fc.$
35014228c.$
c3be572ec.$
64e8c343c.$
b6e90905c.$
bd18b008c.$
0554918ec.$
66cd0d7dc.$
7ccd235ac.$
e34af4dec.$
d7996331c.$
ade5a65bc.bin$
4fe1cb68c.exe$
c3dc4900c.bin$
9c10a9a9c.exe$
bb916d5bc.bin$
f75c8ea1c.$
ab7587b9c.$
f29c815dc.pe_$
1791b3d9c.exe$
c8df17a9c.bin$
47783400c.$
876a0abac.exe$
a722b041c.exe$
3a7c21f6c.$
6a7b74c9c.exe$
ba0adc1ec.dat$
0950e5dec.exe$
0dffeb0dc.pws$
dc42c5d9c.bin$
fbc4a84cc.bin$
224ad015c.bin$
0eb2f5edc.nls$
c9e6cd6bc.$
b418cba9c.$
3d5ef0d2c.$
317baf69c.$
64e2ee23c.exe$
738782dcc.bin$
ff4de9dac.exe$
23f155fac.$
cbb6c0b2c.$$$$
43034f2cc.pif$
fe74a8b6c.pee$
52af205ec.$
abe0fd83c.exe$
27db318bc.exe$
af17c436c.exe$
da8c404dc.exe$
c5f9dacbc.exe$
01a5ec3ac.pee$
2be35a7ac.bin$
1d05aea1c.exe$
b7b67469c.bin$
27cd5f30c.$
fc8ee9e0c.bin$
f5c5462fc.$
8217d245c.$
407ede07c.$
6b2b0e38c.$
8837fc5dc.$
95ca62d5c.bin$
292353adc.$
5d435a9dc.$
f7dcec31c.exe$
d9a782e6c.exe$
653d0efdda5c841c473ee0f68c9a4d65
83065d69c.$
3d2a6e97c.$$$
b65c8698c.exe$
d68048a6c.exe$
6899b212c.bin$
00000000c.exe$
b656384bc.$
8216c80dc.pws$
36918d39c.bin$
14e44241c.bin$
a7dc893cc.bin$
58cc6213c.exe$
d41b7bf1c.exe$
61a42840c.$
afa66fefc.$
dddd9f84c.$
8b32a049c.exe$
e720717cc.$
f320eeb8c.exe$
23c1fe48c.b_t$
87ec6922c.$
15308152c.pws$
a87dec2dc.exe$
d9a998d3c.$
9c10a9a9c.exe$
81fd415fc.$
db8725a4c.bin$
2be35a7ac.$
8beab0f4c.gs_$
54f9a735c.m_t$
9f7e418cc.$
1f413357c.pws$
00000000c.pws$
54399a1ac.exe$
59fadb32c.$$
2be35a7ac.$
2be35a7ac.bin$
2be35a7ac.exe$
2be35a7ac.exe$
54f2d1d4c.bin$
00000000c.pws$
00000000c.pws$
ef4e8a23c.$
00000000c.pws$
026c8f71c.$
27077959c.com$
30b82ca1c.exe$
8a42f47dc.$
2be35a7ac.bin$
8d6c4659c.$$
4fa8afd4c.exe$
7defe736c.bin$
1a3be7f4c.exe$
94a17848c.exe$
0378d731c.pws$
0811ce7cc.pe_$
2d361e8ac.pee$
de414811c.dl1$
00000000c.dll$
5fa988c2c.bin$
0da8cba4c.bin$
85b5327ec.bin$
381a8283c.exe$
96f662d0c.exe$
54320ba2c.bin$
144d9207c.exe$
c264c592c.$$$
2593cae9c.bin$
e9dfb00bc.exe$
7e7495c8c.bin$
3ac22829c.$
c002e2fec.$
c8e22346c.bin$
994e3d75c.$
2be35a7ac.$
e20f2545c.exe$
7b5f8ec6c.$
5827f263c.$
d53126a6c.bin$
cf5a641cc.exe$
d483e822c.$$$$
61918a9dc.$
5d826c7bc.exe$
7e077c0ec.bin$
b4687b05c.exe$
c50e0614c.$
6420198ec.$
d423fe78c.exe$
8526497ec.exe$
9c10a9a9c.exe$
aeb89400c.$
ad60e531c.$
c1f9d715c.exe$
21f8e132c.bin$
768c1853c.exe$
3627bdfcc.$
950e378fc.exe$
2be35a7ac.$
8343fcd9c.$
e0a27690c.exe$
76ffeeffc.exe$
0916f324c.exe$
2e1c1468c.$
4f245e2ec.pee$
e2add98bc.pe_$
944ed610c.pe_$
e372e8a5c.com$
2be35a7ac.$
4e1551bfc.exe$
f86b6f6dc.$
f693d7d3c.$
2be35a7ac.$
b67aa507c.r_t$
d2b80dd1c.exe$
5d7caff0c.bin$
16931170c.bin$
f085b2c4c.exe$
43d229efc.bin$
28e6614fc.com$
75786c12c.exe$
9c55406bc.bin$
1529f444c.$
7fac537fc.bin$
6ce91c5ec.exe$
77e72176c.exw$
3d488223c.bin$
52579c71c.exe$
4920944fc.exw$
d7b98584c.exw$
e28f7ed4c.exw$
1c334b84c.exw$
c2f5f175c.bin$
7b8438c7c.exe$
ebadf28fc.exe$
1cb47945c.$
466f4b4ac.exe$
ea58d174c.pws$
0229b2ebc.bin$
ed1be623c.bin$
4c5632e2c.exe$
d26adde8c.bin$
b46d9eddc.bin$
9bf21b19c.$
81b09a22c.pws$
09c2906bc.exe$
4efa767dc.$
05416d0dc.$
156e1c2dc.$
e0b41b6dc.$$
de459382c.$
f85edd6dc.$
723e61d6c.a29$
348d7402c.exe$
9c10a9a9c.exe$
204d5f53c.$
6bce3deac.com$
9cc9bde3c.exe$
6a9a2898c.exe$
03c12e5ac.exe$
6debd83cc.exe$
87b67ac2c.exe$
00ce76bfc.$
a2e2e754c.$
81485381c.bin$
3401ba83c.$
6cb7187ac.$
2db6c1c5c.spy$
a9e2c267c.spy$
2ca682b3c.exe$
5bc06428c.pws$
a6a3fa1ec.$
249a9ebdc.$
4e7cd5ffc.$
37123c06c.exe$
6f5fd6f2c.exe$
b942e894c.$
3ef499f6c.exe$
4001c73fc.$
cb3820a3c.$
361027f2c.bin$
92afa673c.exe$
08a30c2dc.sls$
2b25dfd5c.$
5d2e6395c.dll$
77c3e345c.pws$
05cbff81c.$$
1b2d5455c.bin$
570fad7bc.bin$
a5bac60cc.bin$
20829522c.exe$
570fad7bc.bin$
f76cb350.exe
8ada3ee4.exe

News for Nov 20, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up