WJPLAY.EXE – Virus Part

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WJPLAY.EXE – Virus Part removal

File MD5 Virus Alias
WJPLAY.EXE fa181487fd9edc5d6689c27d8f02d7a2 Virus Part

WJPLAY.EXE size: 355472 bytes
WJPLAY.EXE hash: FA181487FD9EDC5D6689C27D8F02D7A2

Created files:

%Program Files%\wjplay2\20140331232706\DuiLib.dll
%Program Files%\wjplay2\20140331232706\PlayerUpdate.exe
%Program Files%\wjplay2\20140331232706\Unins.exe
%Program Files%\wjplay2\20140331232706\wjplay.exe
%Program Files%\wjplay2\20140331232706\WJSpeed.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wjplay2_News_20140331232706: “%Program Files%\wjplay2\20140331232706\WJSpeed.exe” -mini
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wjplay2_20140331232706: “%Program Files%\wjplay2\20140331232706\wjplay.exe” -mini

Detected by UnHackMe:

WJPLAY.EXE
Default location: %PROGRAM FILES%\WJPLAY2\20140331232706\WJPLAY.EXE

Dropper information:
MD5: b26b34eb1681037577981f2b953c1eee
File size: 1999504 bytes

Leave a Reply