WINSERVICES.EXE – Trojan-Ransom Winlock

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINSERVICES.EXE – Trojan-Ransom Winlock removal

File MD5 Virus Alias
WINSERVICES.EXE 39c94953f11c2480bb1c568cc8cfb623 Trojan-Ransom Winlock
WINSERVICES.EXE 39c94953f11c2480bb1c568cc8cfb623 Trojan Artemis
WINSERVICES.EXE 39c94953f11c2480bb1c568cc8cfb623 Trojan Agent
WINSERVICES.EXE 39c94953f11c2480bb1c568cc8cfb623 Trojan ZBot
WINSERVICES.EXE 39c94953f11c2480bb1c568cc8cfb623 Trojan Kryptik

WINSERVICES.EXE size: 136051 bytes
WINSERVICES.EXE hash: 39C94953F11C2480BB1C568CC8CFB623

Created files:

%SysDir%\winservices.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ProxyService: %WinDir%\System32\winservices.exe

Detected by UnHackMe:

WINSERVICES.EXE
Default location: %SYSDIR%\WINSERVICES.EXE

Dropper information:
MD5: 39c94953f11c2480bb1c568cc8cfb623
File size: 136051 bytes

Leave a Reply