IMNames

Description: Adware
Risk Level: Low
Date of First Occurence: Tuesday, April 29, 2008
Software Developer: (unknown)
Brief Info: Adware Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
Removal: This threat can be removed using "Spyware Terminator"

ELIMINAR SPYWARE »

Geographical Distribution of Threat "IMNames"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\Instant Messenger Names\main.exe MD5: 6EF67529BB79C14412DF8ED42AD1C53E Size:32768 MD5: A2608FF37AF974FFFD9EA6AE585631B5 Size:32768 MD5: 2CF12BBFCAA4E76C0C7AD77D084EC99F Size:32768 MD5: 90CD9CF3934B5965824DE6D7CC6D4627 Size:32768 %PROGRAMFILES%\Instant Messenger Names\IM-svr.EXE MD5: E2AA790E9CC8CE657E400ECF341A2976 Size:163840 MD5: 06172D6EA53DC31C3614FAC69171D156 Size:163840 MD5: B4D03F4B85D001E03B9FE6C1A4E2306D Size:163840 %PROGRAMFILES%\Instant Messenger Names\IM-svr.exe MD5: 1B45C44F8463B7194BFCB5D7D11CCDD0 Size:163840 MD5: E08838CBBB9946F4BA769122D8A17A79 Size:163840 %PROGRAMFILES%\Instant Messenger Names\1.exe MD5: 2E01D3F3F737D15DA95778451F3255F6 Size:196617 MD5: 9725E0885BEA4828E786E3E3012405EA Size:196617 %PROGRAMFILES%\Instant Messenger Names\IMNames.exe MD5: B8A1755BA829F4D63CE1908C162451AC Size:20480
  2. Detected Files with variable Filenames: MD5: E051DB15C1340C0AF26D8E1E002E7D8E Size: 120422 %PROGRAMFILES%\Instant Messenger Names\2.exe %PROGRAMFILES%\Instant Messenger Names\2.exe.ren MD5: D2026C8FC2BD7474C7CA0D558C8EC110 Size: 143360 %PROGRAMFILES%\Instant Messenger Names\IM-svr.exe %PROGRAMFILES%\Instant Messenger Names\im-svr.exe.ren MD5: 3991A1D20C08A875A3E7BAC65B5DFFEE Size: 209335 %PROGRAMFILES%\Instant Messenger Names\1.exe %PROGRAMFILES%\Instant Messenger Names\1.exe.ren MD5: A2608FF37AF974FFFD9EA6AE585631B5 Size: 32768 %PROGRAMFILES%\Instant Messenger Names\main.exe %PROGRAMFILES%\Instant Messenger Names\main.exe.ren MD5: 013096FCE1A6EF62BE3858AED04147D9 Size: 20480 %PROGRAMFILES%\Instant Messenger Names\IMNames.exe %PROGRAMFILES%\Instant Messenger Names\imnames.exe.ren MD5: B7AE03C7EC1344983E11623F7546E47F Size: 20480 %PROGRAMFILES%\Instant Messenger Names\IMNames.exe %PROGRAMFILES%\Instant Messenger Names\IMNames_original.exe

Detecting items list:

  1. Files by Name %PROGRAMFILES%\Instant Messenger Names\1.exe %PROGRAMFILES%\Instant Messenger Names\IMNames.exe %PROGRAMFILES%\Instant Messenger Names\IM-svr.exe %PROGRAMFILES%\Instant Messenger Names\main.exe
  2. Files by Directories %PROGRAMFILES%\Instant Messenger Names
  3. Registry Keys HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMNames
  4. Registry Values HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=IMprocess

« Go to Software Database