WMSUPDATE.EXE – Trojan Kazy

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WMSUPDATE.EXE – Trojan Kazy removal

File MD5 Virus Alias
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan Kazy
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan SuspiciousFile
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan XPACK
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan Generic
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan Downloader
WMSUPDATE.EXE 1a67f89beb2741b8374662938b6fc474 Trojan CI

WMSUPDATE.EXE size: 1157632 bytes
WMSUPDATE.EXE hash: 1A67F89BEB2741B8374662938B6FC474

Created files:

%TEMP%\Cprepert.tl
%TEMP%\SwMEST
%TEMP%\WmsUpdate.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RUN\lhhjfbbaldojleeb: %TEMP%\WmsUpdate.exe

Detected by UnHackMe:

WMSUPDATE.EXE
Default location: %TEMP%\WMSUPDATE.EXE

Dropper information:
MD5: 1a67f89beb2741b8374662938b6fc474
File size: 1157632 bytes

Leave a Reply