Click on screenshot to zoom
Danger level 7
Type: Worms
Common infection symptoms:
  • Connects to the internet without permission
  • Installs itself without permissions
  • Slow Computer
  • Slow internet connection

Worm.Duptwux.A

Worm.Duptwux.A is a malicious self propagating worm that will spread itself from PC to another without any user action being required. It spreads itself in numerous ways, most commonly through removable or network drives, or by attempting to exploit certain susceptibilities in its targeted computers’ security. Worm.Duptwux.A will also attempt to spread itself through platforms that require user interaction to run. This is done by sending itself as an attachment to an instant or email message, or by sending a link to in the body of an email message.

It will make the email or instant message seem convincing, and will in that way succeed in tricking the user to download the attachment or click on the link. When the user does this, Worm.Duptwux.A will be executed and his PC will be infected. Worm.Duptwux.A will perform all of its tasks in the system’s background, which means that the user will have a tough time identifying Worm.Duptwux.A on the system in the first place. The presence of the following files on the PC is an indication of a Worm.Duptwux.A infection:

help.hlp
jusched.exe
fav .exe
rln.exe

Worm.Duptwux.A will create the following file on the targeted drive when spreading:

Fav.exe

It will also place an autorun.inf file in the root directory of the targeted drive. Such autrun.inf files will contain execution instructions for the OS so that when the removable drive is accessed from a different system which also supports the Autorun feature, Worm.Duptwux.A will be launched on that PC.

Worm.Duptwux.A will add itself to applications authorized to access the Internet without being stopped by the Firewall. It will then contact the following hosts using these ports:

elegan_786444.el.funpic.org using port 21
elegan_786444.el.funpic.org using port 10015

The reason for Worm.Duptwux.A connecting to these hosts is to confirm a new infection to its authors, receive configuration data and to download and execute additional arbitrary files that will contain more malware. It will also relay stolen information from the user’s PC, like websites visited and financial information.

In order to protect your PC against the devastation Worm.Duptwux.A will wreak, destroy Worm.Duptwux.A with the help of a powerful security tool. This will not only erase Worm.Duptwux.A from your PC, but also protect your system against similar attacks in future.

Download Spyware Removal Tool to Remove* Worm.Duptwux.A
  • Quick & tested solution for Worm.Duptwux.A removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Worm.Duptwux.A

Files associated with Worm.Duptwux.A infection:

afd.sys
268.exe
82.exe
mrxsmb.sys
dxf.exe
HolyBot Crack.exe
wbg.exe
F3DBA.exe
213CB.exe
HPUpdate.exe
uGYVondJrVpdI.exe
i8042prt.sys
FD0.exe
winlogin.exe
00001.exe
FNFPDoJienHIJQ.exe
SXtLWQw1O6vIOd.exe
plw.exe
wifiap.exe
uww.exe
sdq.exe
30C.exe
7E9.exe
uos.exe
ewy.exe
Win Dir.exe
_ex-68.exe
CheatEngine56.exe
522.exe
8F3.exe
PBu7m1T6ROzhCd.exe
hot.exe
B6232F3AE41.exe
U0OGCY6AvSMGl4.exe
chrome.exe
BFC.exe
72B50.exe
iopc.exe
bcc.exe
securityhelper.exe
tut.exe
Usbmon.exe
696.exe
soy.exe
isecurity.exe
svcs.exe
dmp.exe
Cheat Engine.exe
E90.exe
bLSzoe0oEEW11o.exe
ctxusbm.sys
AstrologyAuto.exe
tdx.sys
cisvc.exe
7HLiqbd2kgIbZE.exe
rsu.exe
48829.exe
8A477.exe
Alcohol.exe
cro.exe
Copa.exe
USB3Nw32.dll
B6232F3AC49.exe
privacy.exe
pGONmFwqUnrH.exe
securityhelper.exe
isecurity.exe
rsu.exe
bcc.exe
mrxsmb.sys
afd.sys
winlogin.exe
win7.exe
win32.exe
wifiap.exe
wbg.exe
uww.exe
Usbmon.exe
USB3Nw32.dll
tut.exe
tdx.sys
SXtLWQw1O6vIOd.exe
svcs.exe
sdq.exe
plw.exe
pGONmFwqUnrH.exe
oit.exe
iopc.exe
i8042prt.sys
hs31ufv5t9.exe
HPUpdate.exe
hot.exe
HolyBot Crack.exe
FD0.exe
F3DBA.exe
ewy.exe
E90.exe
dxf.exe
D1C.exe
ctxusbm.sys
cro.exe
Copa.exe
cisvc.exe
cihost.exe
chrome.exe
Cheat Engine.exe
bsq.exe
B6232F3AE41.exe
B6232F3AC49.exe
AstrologyAuto.exe
8A477.exe
82.exe
7HLiqbd2kgIbZE.exe
3B72C.exe
213CB.exe
Win Dir.exe
30C.exe
_ex-68.exe
x9cDeV72aC6ImT.exe
uos.exe
uGYVondJrVpdI.exe
U0OGCY6AvSMGl4.exe
soy.exe
privacy.exe
PBu7m1T6ROzhCd.exe
nsePyfBQdn.exe
lvvm.exe
FNFPDoJienHIJQ.exe
dmp.exe
BVnMMdPUIl.exe
bLSzoe0oEEW11o.exe
BFC.exe
AnRKntfWhA.exe
Alcohol.exe
8F3.exe
522.exe
48829.exe
268.exe
00001.exe
clhost.exe
7E9.exe
72B50.exe
696.exe
windows.exe
AnRKntfWhA.exe
hs31ufv5t9.exe
nsePyfBQdn.exe
lvvm.exe
win32.exe
bsq.exe
D1C.exe
cihost.exe
oit.exe
windows.exe
3B72C.exe
clhost.exe
x9cDeV72aC6ImT.exe
BVnMMdPUIl.exe
win7.exe

Worm.Duptwux.A DLL's to remove:

USB3Nw32.dll

Worm.Duptwux.A processes to kill:

plw.exe
E90.exe
clhost.exe
wifiap.exe
bsq.exe
iopc.exe
AstrologyAuto.exe
213CB.exe
Alcohol.exe
uGYVondJrVpdI.exe
U0OGCY6AvSMGl4.exe
PBu7m1T6ROzhCd.exe
lvvm.exe
CheatEngine56.exe
cro.exe
win7.exe
cisvc.exe
oit.exe
soy.exe
F3DBA.exe
rsu.exe
isecurity.exe
7HLiqbd2kgIbZE.exe
BFC.exe
uww.exe
Cheat Engine.exe
30C.exe
72B50.exe
win32.exe
hs31ufv5t9.exe
_ex-68.exe
82.exe
tut.exe
dmp.exe
x9cDeV72aC6ImT.exe
hot.exe
Win Dir.exe
8A477.exe
Copa.exe
cihost.exe
wbg.exe
522.exe
BVnMMdPUIl.exe
pGONmFwqUnrH.exe
Usbmon.exe
696.exe
privacy.exe
windows.exe
dxf.exe
7E9.exe
3B72C.exe
268.exe
chrome.exe
winlogin.exe
uos.exe
48829.exe
B6232F3AC49.exe
FD0.exe
SXtLWQw1O6vIOd.exe
D1C.exe
AnRKntfWhA.exe
nsePyfBQdn.exe
bLSzoe0oEEW11o.exe
8F3.exe
securityhelper.exe
isecurity.exe
rsu.exe
bcc.exe
winlogin.exe
win7.exe
win32.exe
wifiap.exe
wbg.exe
uww.exe
Usbmon.exe
tut.exe
SXtLWQw1O6vIOd.exe
svcs.exe
sdq.exe
plw.exe
pGONmFwqUnrH.exe
oit.exe
iopc.exe
hs31ufv5t9.exe
HPUpdate.exe
hot.exe
HolyBot Crack.exe
FD0.exe
F3DBA.exe
ewy.exe
E90.exe
dxf.exe
D1C.exe
cro.exe
Copa.exe
cisvc.exe
cihost.exe
chrome.exe
Cheat Engine.exe
bsq.exe
B6232F3AE41.exe
B6232F3AC49.exe
AstrologyAuto.exe
8A477.exe
82.exe
7HLiqbd2kgIbZE.exe
3B72C.exe
213CB.exe
Win Dir.exe
30C.exe
_ex-68.exe
x9cDeV72aC6ImT.exe
uos.exe
uGYVondJrVpdI.exe
U0OGCY6AvSMGl4.exe
soy.exe
privacy.exe
PBu7m1T6ROzhCd.exe
nsePyfBQdn.exe
lvvm.exe
FNFPDoJienHIJQ.exe
dmp.exe
BVnMMdPUIl.exe
bLSzoe0oEEW11o.exe
BFC.exe
AnRKntfWhA.exe
Alcohol.exe
8F3.exe
522.exe
48829.exe
268.exe
00001.exe
clhost.exe
7E9.exe
72B50.exe
696.exe
windows.exe
bcc.exe
HolyBot Crack.exe
B6232F3AE41.exe
svcs.exe
ewy.exe
HPUpdate.exe
securityhelper.exe
sdq.exe
00001.exe
FNFPDoJienHIJQ.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.