home

ccqvedumb.pif

Arozolo

House

The file ccqvedumb.pif has been detected as malware by 40 anti-virus scanners.
Publisher:
House

Product:
Arozolo

Description:
Zamal

Version:
9, 1, 5, 2

MD5:
998abe256b2e948b135df141e66fb9a2

SHA-1:
a0b30eb89627881acf3bed1bab684c3329fd8c95

SHA-256:
70efcc1d37cb4f0fc370febff575e2ca12a0274ec213f75659243baf998c7878

Scanner detections:
40 / 68

Status:
Malware

Analysis date:
4/26/2024 3:51:56 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Backdoor.Agent.ABKS
948

Agnitum Outpost
Backdoor.Androm
7.1.1

AhnLab V3 Security
Backdoor/Win32.Androm
2014.07.03

Avira AntiVirus
TR/Agent.139264.123
7.11.158.4

avast!
Win32:Downloader-TVO [Trj]
140617-1

AVG
Trojan horse BackDoor.Generic17.ACKZ
2014.0.3986

Bitdefender
Backdoor.Agent.ABKS
1.0.20.915

Bkav FE
W32.AndromedaAgentC.Trojan
1.3.0.4959

Clam AntiVirus
Win.Trojan.Agent-734247
0.98/19073

Comodo Security
TrojWare.Win32.Kryptik.BBYD
18740

Dr.Web
BackDoor.Andromeda.178
9.0.1.05190

Emsisoft Anti-Malware
Backdoor.Agent.ABKS
8.14.07.02.08

ESET NOD32
Win32/TrojanDownloader.Wauchos.L trojan
7.0.302.0

Fortinet FortiGate
W32/Wauchos.LB!tr
7/2/2014

F-Prot
W32/Gamarue.B.gen
4.6.5.141

F-Secure
Backdoor.Agent.ABKS
11.2014-02-07_4

G Data
Backdoor.Agent.ABKS
14.7.24

IKARUS anti.virus
Worm.Win32.Gamarue
t3scan.1.6.1.0

K7 AntiVirus
Trojan-Downloader
13.180.12586

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.3623

Malwarebytes
Worm.Gamarue
v2014.07.02.08

McAfee
W32/Worm-FLC!998ABE256B2E
5600.7082

Microsoft Security Essentials
Threat.Undefined
1.177.1351.0

MicroWorld eScan
Backdoor.Agent.ABKS
15.0.0.549

NANO AntiVirus
Trojan.Win32.Androm.cjbbof
0.28.0.60577

Norman
Gamarue.BCD
11.20140702

nProtect
Backdoor.Agent.ABKS
14.07.02.01

Panda Antivirus
Trj/Dtcontx.F
14.07.02.08

Qihoo 360 Security
Malware.QVM07.Gen
1.0.0.1015

Quick Heal
Worm.Gamarue.B
7.14.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
14.12.21.23

Sophos
W32/Gamarue-BK
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Androm
10508

Total Defense
Win32/Gamarue.A!generic
37.0.11033

Trend Micro House Call
WORM_GAMARUE.SMV
7.2.183

Trend Micro
WORM_GAMARUE.SMV
10.465.02

Vba32 AntiVirus
SScope.Malware-Cryptor.Wauchos.2183
3.12.26.3

VIPRE Antivirus
Threat.4789168
29708

ViRobot
Backdoor.Win32.Androm.116835
2011.4.7.4223

Zillya! Antivirus
Backdoor.Androm.Win32.1262
2.0.0.1844

File size:
106.2 KB (108,757 bytes)

Product version:
2, 1, 2, 8

Copyright:
Copyright Sepa© 1992

Trademarks:
Amor©

Original file name:
Asir

Language:
English (United States)

Common path:
C:\ProgramData\local settings\temp\ccqvedumb.pif

File PE Metadata
Compilation timestamp:
7/7/2013 7:49:30 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:64+VX4ovwo5oekZP4O4VzslEf1SAQeznUj/QEo:0oo5ohPV4VeNAQerUzQEo

Entry address:
0x259A

Entry point:
55, 8B, EC, 6A, FF, 68, A0, 60, 40, 00, 68, 18, 33, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 14, 60, 40, 00, 33, D2, 8A, D4, 89, 15, 80, A0, 40, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 7C, A0, 40, 00, C1, E1, 08, 03, CA, 89, 0D, 78, A0, 40, 00, C1, E8, 10, A3, 74, A0, 40, 00, 33, F6, 56, E8, C8, 0B, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 93, 08, 00, 00, FF, 15, 10, 60, 40, 00, A3, 78, A5, 40, 00, E8...
 
[+]

Entropy:
6.1396

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
19 KB (19,456 bytes)

Policies Explorer Run
Name:
46770


Remove ccqvedumb.pif - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.