2TRA.EXE is Worm Gamarue

April 11, 2012 by NightWatcher
Filed under: Worm 
: Solved!

You should Download Removal Tool here...

The file 2TRA.EXE is a computer worm.
The worm 2TRA.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the 2TRA.EXE problem as soon as possible!
Delete the file 2TRA.EXE from all infected computers in your network.
Set up your network firewall against 2TRA.EXE intervention.

Malware Analysis of 2TRA.EXE
Full path on a computer: %Profile%2tra.exe

Detected by UnHackMe:

2TRA.EXE
Default location: %Profile%2tra.exe

Removal Results: Success
Number of reboot: 1

2TRA.EXE is known as:

Worm.Gamarue, Trojan.Tipp, Trojan.Foreign

2TRA.EXE hash:

  • MD5: 4bff29479d8581de491a6a45fe36d580
The file tries to connect to the dangerous web site.
How to quickly detect 2TRA.EXE presence?

Folders:
  • %WinDir%$NtUninstallKB62478$
Files:
  • %Profile%1tra.exe
  • %Profile%2tra.exe
  • %Profile%3tra.exe
  • %Profile%4tra.exe
  • %Profile%fi6sdk5yfs.exe
  • %Profile%start1.exe
  • %Profile%ztra.exe
  • C:Documents and SettingsAll UsersLocal SettingsTempmsdubmnax.exe
  • %SysDir%dds_trash_log.cmd
  • %SysDir%themes.dll


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.