I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
XEPPYDN.EXE – Trojan Vilsel removal
| File | MD5 | Virus Alias |
|---|---|---|
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Trojan Vilsel |
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Trojan Generic |
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Trojan Eldorado |
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Trojan PAM |
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Trojan Renos |
| XEPPYDN.EXE | 033e12aac5b6439bb04bd643898e3948 | Worm Autorun |
XEPPYDN.EXE size: 327680 bytes
XEPPYDN.EXE hash: 033E12AAC5B6439BB04BD643898E3948
Created files:
%TEMP%\xeppydn.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\mughrxip: xqnzulhzxlldiqdwtfa.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\zenls: %TEMP%\dupzshbrnzxnqwhyt.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: wmgphvodyjgvxcmc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\oaqvjtitkrkv: %TEMP%\wmgphvodyjgvxcmc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: mealfvqherqhlsewsd.exe .
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\rcrvirfpfld: %TEMP%\xqnzulhzxlldiqdwtfa.exe .
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dmzbmtfnb: wmgphvodyjgvxcmc.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: %TEMP%\zuthexvppfhbishcbpmfd.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\wguxjrench: kecpldatshibhqeywjfx.exe .
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: %TEMP%\zuthexvppfhbishcbpmfd.exe .
Detected by UnHackMe:
XEPPYDN.EXE
Default location: %TEMP%\XEPPYDN.EXE
Dropper information:
MD5: 033e12aac5b6439bb04bd643898e3948
File size: 327680 bytes