Solved! Use TWEXT.EXE (Trojan Binder) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

TWEXT.EXE – Trojan Binder removal

File MD5 Virus Alias
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan Binder
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan Eldorado
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan Downloader
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan Agent
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan Small
TWEXT.EXE 37b85e0b6b46774a2e3198e2ec741655 Trojan ZBot

TWEXT.EXE size: 464927 bytes
TWEXT.EXE hash: 37B85E0B6B46774A2E3198E2EC741655

Created files:

%SysDir%\twext.exe
%Temp%\5er19.exe

Autostart registry keys:

HKLM\Software\Microsoft\windows nt\currentversion\winlogon\userinit: %WinDir%\System32\userinit.exe,%WinDir%\System32\twext.exe,

Detected by UnHackMe:

TWEXT.EXE
Default location: %SYSDIR%\TWEXT.EXE

Dropper information:
MD5: 006872137ce3864b37546b5736ac3307
File size: 101095 bytes

Leave a Reply