I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
SYSTEM.EXE – Trojan CoinMiner removal
| File | MD5 | Virus Alias |
|---|---|---|
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan CoinMiner |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Bitcoin |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Btcmine |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Generic |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Agent |
SYSTEM.EXE size: 187904 bytes
SYSTEM.EXE hash: E2C655DB1CCD3A632DED94EACB933643
Created files:
C:\Windows\syso\critical\libcurl-4.dll
C:\Windows\syso\critical\libcurl.dll
C:\Windows\syso\critical\pthreadGC2.dll
C:\Windows\syso\critical\system.exe
C:\Windows\syso\critical\zlib1.dll
C:\Windows\system32\nircmd.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update: C:\Windows\syso\critical\antivirus.bat
Detected by UnHackMe:
SYSTEM.EXE
Default location: %WinDir%\SYSO\CRITICAL\SYSTEM.EXE
Dropper information:
MD5: f865c199024105a2ffdf5fa98f391d74
File size: 589798 bytes