SERVE.EXE – Trojan Kazy

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SERVE.EXE – Trojan Kazy removal

File MD5 Virus Alias
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan Kazy
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan SuspiciousFile
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan XPACK
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan Generic
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan Eldorado
SERVE.EXE b14e1a9343a59fcbe06b0e2dcbf87684 Trojan Agent

SERVE.EXE size: 249509 bytes
SERVE.EXE hash: B14E1A9343A59FCBE06B0E2DCBF87684

Created files:

%Program Files%\Ruuoww szuou\serve.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\MarkTime: 2013-03-12 01:51
HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\Type: 10010000
HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\Start: 02000000
HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\DisplayName: Iwkueu gwmgkcsc
HKLM\System\CurrentControlSet\Services\Mckwsa waaiqa\ImagePath: %Program Files%\Ruuoww szuou\serve.exe
HKLM\System\CurrentControlSet\Services\Rueyjy ncesccoi\ReleiceName: Mckwsa waaiqa

Detected by UnHackMe:

SERVE.EXE
Default location: %PROGRAM FILES%\RUUOWW SZUOU\SERVE.EXE

Dropper information:
MD5: b14e1a9343a59fcbe06b0e2dcbf87684
File size: 249509 bytes

Leave a Reply