Home / Spyware Encyclopedia / IM.Subsev << Back

Recommendation to Automatically remove IM.Subsev


Our products can remove IM.Subsev and thousands of other Virus and Spyware automatically and instantly.

IM.Subsev Details


  • Category IM
  • Discovered 5/11/2009 9:38:09 AM
  • Modified 8/11/2023 3:35:39 PM
  • Threat Level Critical
  • Category Description
    A threat that is capable to cause Denial-Of-Service attacks against other instant messenger client systems.

The following Files were created:
VALUEFILESIZECOMPANYNAMEVERSIONSIGNATUREDate
virtual maid.dll 274432 1.2.0.0f82f405cd8134c7093072dd7738fd34d 
ole32vbs.exe 8713  f92e7f4487979210385d93c2ba52e709 
energyplugin.exe 54784  f4b5a08afbd99a8e0be0093197df5647 
helper.exe 8704  f49f5360b9a6d9b6317195c5fa67fc9e 
thn32.dll 28672  f48d022852676af4b20d504fbd91547d 
intmonp.exe 2048  d3c4a0be0b173234c64912a248046f27 
ole32vbs.exe 2560  c5723094c2238dc908e868426fde698d 
energyplugin.exe 54784  a44cb1efd807057cc0d9c0abec26c691 
Trojan-Dropper.Win32.Small.xe.exe 11884  a097568779250a535862a380bb502c38 
helper.exe 8445  760f58cd3f1e9ace32a8ffcb761b460d 

The following Registry Entries were created:
..\Software\Microsoft\Windows\CurrentVersion\Run\\"MSN Messenger"\"%WIN.SYS32%\msmsgs.exe"
..\Software\Microsoft\Internet Explorer\Security\"dll"\"0"
..\Software\Microsoft\Internet Explorer\Toolbar\\"{77B2F8DE-CB3F-4b6b-839B-807DD1ADBA1C}"\"Virtual Maid"
..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"winlogon.exe"\"helper.exe"
..\Software\Microsoft\Windows\CurrentVersion\Run\\"iopen.exe"\"iopen.exe"
..\Software\Microsoft\Internet Explorer\MenuExt\&RSDN Search\(Default)
..\Software\Classes\Clsid\{86bbf924-a33a-4c90-af42-b85818b82f4d}\(Default)
..\Software\Classes\Clsid\{42c07840-d729-4f58-b799-27eb8774cebf}\(Default)
..\Software\Microsoft\Internet Explorer\vars-normal\(Default)
..\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run\"notepad2.exe"\"popuper.exe"

Notice
Please note that the following information is not controlled or endorsed by Max Secure Software. They are captured automatically by tools in our malware Research Lab as a result of executing Spyware Files or browsing Internet in virtual environment. Please contact us if you find any information inappropriate for removal. All the work contained in this report is copyrighted and should not be copied without permission from Max Secure Antivirus. We do not recommend browsing or removing these entries on your own manually. We do not take any warranty against the use or result of the use of this information.

Home / Malware Encyclopedia << Back

Max Total Security can detect & quarantine this Malware