Solved! Use MDMS.EXE (Trojan StartPage) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MDMS.EXE – Trojan StartPage removal

File MD5 Virus Alias
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan StartPage
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan DLOADER
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan (Suspicious File)
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan Eldorado
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan Downloader
MDMS.EXE d800331d5773e9dbd5b3c42e6ef75a68 Trojan CI

MDMS.EXE size: 39393 bytes
MDMS.EXE hash: D800331D5773E9DBD5B3C42E6EF75A68

Created files:

C:\windows\system32\mdms.exe
C:\windows\system32\winacpi.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SysMemory manager: c:\windows\System32\mdms.exe

Detected by UnHackMe:

MDMS.EXE
Default location: %SYSDIR%\MDMS.EXE

Dropper information:
MD5: d800331d5773e9dbd5b3c42e6ef75a68
File size: 39393 bytes

Leave a Reply