Solved! Use IE.EXE (Trojan StartPage) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

IE.EXE – Trojan StartPage removal

File MD5 Virus Alias
IE.EXE 9186281d18f2de8bbbadc9aad25f55d7 Trojan StartPage
IE.EXE 9186281d18f2de8bbbadc9aad25f55d7 Trojan Generic
IE.EXE 9186281d18f2de8bbbadc9aad25f55d7 Trojan Downloader
IE.EXE 9186281d18f2de8bbbadc9aad25f55d7 Trojan CI
IE.EXE 9186281d18f2de8bbbadc9aad25f55d7 Trojan Siggen

IE.EXE size: 12800 bytes
IE.EXE hash: 9186281D18F2DE8BBBADC9AAD25F55D7

Created files:

C:\Documents and Settings\Administrator\Favorites\Fixed_Directory_Name\UnicodeFile.bin
C:\Documents and Settings\Administrator\Favorites\Fixed_Directory_Name\UnicodeFile_1.bin
C:\Documents and Settings\Administrator\Favorites\Fixed_Directory_Name\UnicodeFile_2.bin
C:\Documents and Settings\Administrator\Fixed_Directory_Name\UnicodeFile.bin
%WinDir%\arp+.exe
%WinDir%\DriverFire.exe
%WinDir%\FireDll.dll
%WinDir%\ie.exe
%WinDir%\run.vbs
%SYSDIR%\ie.exe
%SYSDIR%\IE_BHO.dll
%SYSDIR%\MainPro.exe
%WinDir%\UpSys.exe
%WinDir%\zm.exe

Detected by UnHackMe:

IE.EXE
Default location: %WinDir%\IE.EXE

Dropper information:
MD5: c5dad691ced225bcfc8af40fb42536a3
File size: 2311535 bytes

Leave a Reply