Fake Antivirus Winwebsec – npf.sys – 080d755a3dee9895592ead2c0bdfab35

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Fake Antivirus Winwebsec
Also known as: Trojan Downloader.Generic, Trojan Crypt
SHA256: 3a3ba63393df74ac700366e77ccedcd5b4984ae101c0a0e93ff5389fcc3a55dc
SHA1: 74e953b5624d2e451553a3e7c0b66b516701120f
MD5: 080d755a3dee9895592ead2c0bdfab35
File size: 800768 bytes

Created files:

%SysDir%\drivers\npf.sys – Fake Antivirus Winwebsec

Fake Antivirus Winwebsec created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\AmdAgent: 080D755A3DEE9895592EAD2C0BDFAB35.EXE

Leave a Reply