WINDOWS.EXE – Trojan Banker

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINDOWS.EXE – Trojan Banker removal

File MD5 Virus Alias
WINDOWS.EXE 1791bf1398ffb7470ab0c4dbfa52c6f4 Trojan Banker
WINDOWS.EXE 1791bf1398ffb7470ab0c4dbfa52c6f4 Trojan Bancos

WINDOWS.EXE size: 795648 bytes
WINDOWS.EXE hash: 1791BF1398FFB7470AB0C4DBFA52C6F4

Created files:

%SysDir%\windows.exe
%AllUsersProfile%\start menu\programs\startup\windows.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\windows: %WinDir%\System32\windows.exe

Detected by UnHackMe:

WINDOWS.EXE
Default location: %SYSDIR%\WINDOWS.EXE

Dropper information:
MD5: 1791bf1398ffb7470ab0c4dbfa52c6f4
File size: 795648 bytes

Leave a Reply