Solved! Use RPNOPOP.EXE (Trojan SuspiciousFile) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RPNOPOP.EXE – Trojan SuspiciousFile removal

File MD5 Virus Alias
RPNOPOP.EXE c80af08de6083c3cda8a78479a264f29 Trojan SuspiciousFile

RPNOPOP.EXE size: 550912 bytes
RPNOPOP.EXE hash: C80AF08DE6083C3CDA8A78479A264F29

Created files:

C:\windows\system\7za.exe
C:\windows\system\tools\7za.exe
C:\windows\system\tools\cleanr.exe
C:\windows\system\tools\dxwebsetup1.exe
C:\windows\system\tools\mmc.exe
C:\windows\system\tools\NTLDR
C:\windows\system\tools\p2p-kill.exe
C:\windows\system\tools\rpnopop.exe
C:\windows\system\tools\SuperKiller.exe
C:\windows\system\tools\task.exe
C:\windows\system\tools\WinsockxpFix.exe
C:\windows\system\tools\xavengine.dll
C:\windows\system\tools\UnicodeFile.bin
C:\windows\system\tools\UnicodeFile_1.bin
C:\windows\system\tools.7z

Detected by UnHackMe:

RPNOPOP.EXE
Default location: %WinDir%\SYSTEM\TOOLS\RPNOPOP.EXE

Dropper information:
MD5: b875f48279b747f54c528f3f3c862e22
File size: 3981347 bytes

Leave a Reply