WINWORD.EXE – Trojan Artemis

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINWORD.EXE – Trojan Artemis removal

FileMD5Virus Alias
WINWORD.EXE 492635542483bfe2aad87a534f1ac265 Trojan Artemis
WINWORD.EXE 492635542483bfe2aad87a534f1ac265 Trojan Eldorado
WINWORD.EXE 492635542483bfe2aad87a534f1ac265 Trojan Siggen
WINWORD.EXE 492635542483bfe2aad87a534f1ac265 Trojan Agent
WINWORD.EXE 492635542483bfe2aad87a534f1ac265 Trojan Crypt

WINWORD.EXE size: 187863 bytes
WINWORD.EXE hash: 492635542483BFE2AAD87A534F1AC265

Created files:

%SysDir%\Com\ctfmoon.exe
%SysDir%\WINWORD.EXE
%WinDir%\Temp\_$Cf\12CF787B31F9DE06A766B2838D9616B0 .docx
%WinDir%\Temp\_$Cf\12CF787B31F9DE06A766B2838D9616B0.docx
%WinDir%\Temp\_$Cf\osk.exe

Detected by UnHackMe:

WINWORD.EXE
Default location: %SYSDIR%\WINWORD.EXE

Dropper information:
MD5: 12cf787b31f9de06a766b2838d9616b0
File size: 210030 bytes

Leave a Reply