Click on screenshot to zoom
Danger level 7
Type: Worms
Common infection symptoms:
  • Connects to the internet without permission
  • Installs itself without permissions
  • Slow Computer
  • Slow internet connection

Worm.Duptwux.A

Worm.Duptwux.A is a malicious self propagating worm that will spread itself from PC to another without any user action being required. It spreads itself in numerous ways, most commonly through removable or network drives, or by attempting to exploit certain susceptibilities in its targeted computers’ security. Worm.Duptwux.A will also attempt to spread itself through platforms that require user interaction to run. This is done by sending itself as an attachment to an instant or email message, or by sending a link to in the body of an email message.

It will make the email or instant message seem convincing, and will in that way succeed in tricking the user to download the attachment or click on the link. When the user does this, Worm.Duptwux.A will be executed and his PC will be infected. Worm.Duptwux.A will perform all of its tasks in the system’s background, which means that the user will have a tough time identifying Worm.Duptwux.A on the system in the first place. The presence of the following files on the PC is an indication of a Worm.Duptwux.A infection:

help.hlp
jusched.exe
fav .exe
rln.exe

Worm.Duptwux.A will create the following file on the targeted drive when spreading:

Fav.exe

It will also place an autorun.inf file in the root directory of the targeted drive. Such autrun.inf files will contain execution instructions for the OS so that when the removable drive is accessed from a different system which also supports the Autorun feature, Worm.Duptwux.A will be launched on that PC.

Worm.Duptwux.A will add itself to applications authorized to access the Internet without being stopped by the Firewall. It will then contact the following hosts using these ports:

elegan_786444.el.funpic.org using port 21
elegan_786444.el.funpic.org using port 10015

The reason for Worm.Duptwux.A connecting to these hosts is to confirm a new infection to its authors, receive configuration data and to download and execute additional arbitrary files that will contain more malware. It will also relay stolen information from the user’s PC, like websites visited and financial information.

In order to protect your PC against the devastation Worm.Duptwux.A will wreak, destroy Worm.Duptwux.A with the help of a powerful security tool. This will not only erase Worm.Duptwux.A from your PC, but also protect your system against similar attacks in future.

Download Spyware Removal Tool to Remove* Worm.Duptwux.A
  • Quick & tested solution for Worm.Duptwux.A removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.Duptwux.A

Files associated with Worm.Duptwux.A infection:

plw.exe
Cheat Engine.exe
win32.exe
cisvc.exe
uos.exe
svcs.exe
696.exe
E90.exe
bLSzoe0oEEW11o.exe
ewy.exe
8A477.exe
cro.exe
AnRKntfWhA.exe
72B50.exe
cihost.exe
i8042prt.sys
securityhelper.exe
isecurity.exe
rsu.exe
bcc.exe
mrxsmb.sys
afd.sys
winlogin.exe
win7.exe
win32.exe
wifiap.exe
wbg.exe
uww.exe
Usbmon.exe
USB3Nw32.dll
tut.exe
tdx.sys
SXtLWQw1O6vIOd.exe
svcs.exe
sdq.exe
plw.exe
pGONmFwqUnrH.exe
oit.exe
iopc.exe
i8042prt.sys
hs31ufv5t9.exe
HPUpdate.exe
hot.exe
HolyBot Crack.exe
FD0.exe
F3DBA.exe
ewy.exe
E90.exe
dxf.exe
D1C.exe
ctxusbm.sys
cro.exe
Copa.exe
cisvc.exe
cihost.exe
chrome.exe
Cheat Engine.exe
bsq.exe
B6232F3AE41.exe
B6232F3AC49.exe
AstrologyAuto.exe
8A477.exe
82.exe
7HLiqbd2kgIbZE.exe
3B72C.exe
213CB.exe
Win Dir.exe
30C.exe
_ex-68.exe
x9cDeV72aC6ImT.exe
uos.exe
uGYVondJrVpdI.exe
U0OGCY6AvSMGl4.exe
soy.exe
privacy.exe
PBu7m1T6ROzhCd.exe
nsePyfBQdn.exe
lvvm.exe
FNFPDoJienHIJQ.exe
dmp.exe
BVnMMdPUIl.exe
bLSzoe0oEEW11o.exe
BFC.exe
AnRKntfWhA.exe
Alcohol.exe
8F3.exe
522.exe
48829.exe
268.exe
00001.exe
clhost.exe
7E9.exe
72B50.exe
696.exe
windows.exe
isecurity.exe
privacy.exe
soy.exe
rsu.exe
FNFPDoJienHIJQ.exe
HolyBot Crack.exe
F3DBA.exe
BFC.exe
213CB.exe
D1C.exe
7E9.exe
tut.exe
wbg.exe
Win Dir.exe
3B72C.exe
uww.exe
522.exe
uGYVondJrVpdI.exe
pGONmFwqUnrH.exe
dxf.exe
PBu7m1T6ROzhCd.exe
USB3Nw32.dll
tdx.sys
afd.sys
bcc.exe
Copa.exe
7HLiqbd2kgIbZE.exe
clhost.exe
B6232F3AC49.exe
x9cDeV72aC6ImT.exe
268.exe
FD0.exe
hot.exe
30C.exe
winlogin.exe
Usbmon.exe
Alcohol.exe
B6232F3AE41.exe
CheatEngine56.exe
ctxusbm.sys
nsePyfBQdn.exe
securityhelper.exe
chrome.exe
BVnMMdPUIl.exe
wifiap.exe
lvvm.exe
82.exe
hs31ufv5t9.exe
SXtLWQw1O6vIOd.exe
mrxsmb.sys
oit.exe
U0OGCY6AvSMGl4.exe
win7.exe
dmp.exe
sdq.exe
00001.exe
HPUpdate.exe
_ex-68.exe
48829.exe
windows.exe
iopc.exe
AstrologyAuto.exe
bsq.exe
8F3.exe

Worm.Duptwux.A DLL's to remove:

USB3Nw32.dll

Worm.Duptwux.A processes to kill:

rsu.exe
8A477.exe
AnRKntfWhA.exe
_ex-68.exe
sdq.exe
D1C.exe
48829.exe
clhost.exe
Usbmon.exe
AstrologyAuto.exe
winlogin.exe
7HLiqbd2kgIbZE.exe
hs31ufv5t9.exe
FD0.exe
uww.exe
696.exe
x9cDeV72aC6ImT.exe
U0OGCY6AvSMGl4.exe
PBu7m1T6ROzhCd.exe
tut.exe
00001.exe
soy.exe
lvvm.exe
Alcohol.exe
7E9.exe
ewy.exe
cro.exe
securityhelper.exe
bcc.exe
213CB.exe
B6232F3AE41.exe
cisvc.exe
HolyBot Crack.exe
F3DBA.exe
dmp.exe
hot.exe
HPUpdate.exe
Copa.exe
pGONmFwqUnrH.exe
nsePyfBQdn.exe
uos.exe
8F3.exe
268.exe
chrome.exe
dxf.exe
win7.exe
BFC.exe
bLSzoe0oEEW11o.exe
Cheat Engine.exe
cihost.exe
oit.exe
CheatEngine56.exe
bsq.exe
securityhelper.exe
isecurity.exe
rsu.exe
bcc.exe
winlogin.exe
win7.exe
win32.exe
wifiap.exe
wbg.exe
uww.exe
Usbmon.exe
tut.exe
SXtLWQw1O6vIOd.exe
svcs.exe
sdq.exe
plw.exe
pGONmFwqUnrH.exe
oit.exe
iopc.exe
hs31ufv5t9.exe
HPUpdate.exe
hot.exe
HolyBot Crack.exe
FD0.exe
F3DBA.exe
ewy.exe
E90.exe
dxf.exe
D1C.exe
cro.exe
Copa.exe
cisvc.exe
cihost.exe
chrome.exe
Cheat Engine.exe
bsq.exe
B6232F3AE41.exe
B6232F3AC49.exe
AstrologyAuto.exe
8A477.exe
82.exe
7HLiqbd2kgIbZE.exe
3B72C.exe
213CB.exe
Win Dir.exe
30C.exe
_ex-68.exe
x9cDeV72aC6ImT.exe
uos.exe
uGYVondJrVpdI.exe
U0OGCY6AvSMGl4.exe
soy.exe
privacy.exe
PBu7m1T6ROzhCd.exe
nsePyfBQdn.exe
lvvm.exe
FNFPDoJienHIJQ.exe
dmp.exe
BVnMMdPUIl.exe
bLSzoe0oEEW11o.exe
BFC.exe
AnRKntfWhA.exe
Alcohol.exe
8F3.exe
522.exe
48829.exe
268.exe
00001.exe
clhost.exe
7E9.exe
72B50.exe
696.exe
windows.exe
iopc.exe
30C.exe
522.exe
windows.exe
FNFPDoJienHIJQ.exe
SXtLWQw1O6vIOd.exe
B6232F3AC49.exe
uGYVondJrVpdI.exe
82.exe
BVnMMdPUIl.exe
72B50.exe
3B72C.exe
wbg.exe
E90.exe
Win Dir.exe
privacy.exe
win32.exe
isecurity.exe
svcs.exe
wifiap.exe
plw.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.