Solved! Use NEWFILE.EXE (Unknown) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NEWFILE.EXE – Unknown removal

NEWFILE.EXE size: 245760 bytes
NEWFILE.EXE hash: C2D289EAEFD2F83206F2885B3A6E2439

Created files:

C:\windows\system32\m2syadll.dll
C:\windows\system32\magic.exe
C:\windows\system32\newfile.exe
C:\windows\system32\sssdda334342.vxd

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\MagicLinkServer\Type: 10010000
HKLM\System\CurrentControlSet\Services\MagicLinkServer\Start: 02000000
HKLM\System\CurrentControlSet\Services\MagicLinkServer\DisplayName: MagicLinkServer
HKLM\System\CurrentControlSet\Services\MagicLinkServer\ImagePath: “%WinDir%\System32\magic.exe”

Detected by UnHackMe:

NEWFILE.EXE
Default location: %SYSDIR%\NEWFILE.EXE

Dropper information:
MD5: 166859e7afb74e20cd79344372bb0206
File size: 359752 bytes

Leave a Reply