Fake Antivirus Winwebsec – npf.sys – e39d38b6f0d0de7585002df56692171b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Fake Antivirus Winwebsec
Also known as: Trojan FakeAV, Trojan Kryptik
SHA256: 4fb538e51cfae7a71d252649ba49f6174b40a060ba4c0b448045cf0c31fe0c63
SHA1: 57e71199627f129ca080fa55e0e54955f37dfa8d
MD5: e39d38b6f0d0de7585002df56692171b
File size: 840192 bytes

Created files:

%SysDir%\drivers\npf.sys – Fake Antivirus Winwebsec

Fake Antivirus Winwebsec created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SonyAgent: E39D38B6F0D0DE7585002DF56692171B.EXE

Leave a Reply