XEPPYDN.EXE – Trojan Vilsel

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

XEPPYDN.EXE – Trojan Vilsel removal

FileMD5Virus Alias
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Trojan Vilsel
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Trojan Unknown.Suspicious.File
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Trojan PAM
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Trojan Renos
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Worm Autorun
XEPPYDN.EXE 0bcebca0b0e14ec0d0c810cf73cef0f9 Trojan Agent

XEPPYDN.EXE size: 327680 bytes
XEPPYDN.EXE hash: 0BCEBCA0B0E14EC0D0C810CF73CEF0F9

Created files:

%TEMP%\xeppydn.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\mughrxip: dupzshbrnzxnqwhyt.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\zenls: %TEMP%\xqnzulhzxlldiqdwtfa.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: dupzshbrnzxnqwhyt.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\oaqvjtitkrkv: %TEMP%\dupzshbrnzxnqwhyt.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: dupzshbrnzxnqwhyt.exe .
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\rcrvirfpfld: %TEMP%\zuthexvppfhbishcbpmfd.exe .
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dmzbmtfnb: xqnzulhzxlldiqdwtfa.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: %TEMP%\dupzshbrnzxnqwhyt.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\wguxjrench: kecpldatshibhqeywjfx.exe .
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: %TEMP%\dupzshbrnzxnqwhyt.exe .

Detected by UnHackMe:

XEPPYDN.EXE
Default location: %TEMP%\XEPPYDN.EXE

Dropper information:
MD5: 0bcebca0b0e14ec0d0c810cf73cef0f9
File size: 327680 bytes

Leave a Reply