Impove
boot up time

Run a free scan to diagnose your PC
Start Test!

MSDUBMN.BAT is Worm Gamarue

February 4, 2012 by NightWatcher
Filed under: Worm 
Install UnHackMe Install RegRun

The file MSDUBMN.BAT is a computer worm.
The worm MSDUBMN.BAT is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the MSDUBMN.BAT problem as soon as possible!
Delete the file MSDUBMN.BAT from all infected computers in your network.
Set up your network firewall against MSDUBMN.BAT intervention.

Malware Analysis of MSDUBMN.BAT
Full path on a computer: C:\Documents and Settings\All Users\Local Settings\Temp\msdubmn.bat

Detected by UnHackMe:

MSDUBMN.BAT
Default location: C:\Documents and Settings\All Users\Local Settings\Temp\msdubmn.bat

Removal Results: Success
Number of reboot: 1

MSDUBMN.BAT is known as:

Worm.Gamarue, Trojan.Menti, Trojan.Siggen3

MSDUBMN.BAT hash:

  • MD5: 219906070870505cb68e9292969c3a76
How to quickly detect MSDUBMN.BAT presence?

Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\12278: “C:\DOCUME~1\ALLUSE~1\LOCALS~1\Temp\msdubmn.bat”
Files:
  • %Temp%\0001aed8.tmp
  • C:\Documents and Settings\All Users\Local Settings\Temp\msdubmn.bat

Remove it now!

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!