UNINST_CHECK.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

UNINST_CHECK.EXE – Trojan Downloader removal

FileMD5Virus Alias
UNINST_CHECK.EXE 5a1fe5fa580df7877b9aab926e4f448e Trojan Downloader

UNINST_CHECK.EXE size: 183872 bytes
UNINST_CHECK.EXE hash: 5A1FE5FA580DF7877B9AAB926E4F448E

Created files:

%AppData%\EasyPop\EasyPop_E.exe
%AppData%\EasyPop\EasyPop_R.exe
%AppData%\EasyPop\EasyPop_S.exe
%AppData%\EasyPop\EasyPop_U.exe
%AppData%\EasyPop\NTVBSvc.tlb
%AppData%\EasyPop\uninst_check.exe
%AppData%\EasyPop\zlib.dll

Autostart registry keys:

HKLM\Software\Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59294-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX
HKLM\Software\Classes\CLSID\{48E59295-9880-11CF-9754-00AA00C00908}\InprocServer32 : %WinDir%\System32\MSINET.OCX

Detected by UnHackMe:

UNINST_CHECK.EXE
Default location: %APPDATA%\EASYPOP\UNINST_CHECK.EXE

Dropper information:
MD5: 5caa6a3c135d31a5b850ac509c50b474
File size: 787120 bytes

Leave a Reply