USFT_EXT.DLL – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

USFT_EXT.DLL – Trojan CoinMiner removal

FileMD5Virus Alias
USFT_EXT.DLL f9b32ebc7c42d8845d87761ba3ef13c2 Trojan CoinMiner
USFT_EXT.DLL f9b32ebc7c42d8845d87761ba3ef13c2 Trojan WS.Reputation.1
USFT_EXT.DLL f9b32ebc7c42d8845d87761ba3ef13c2 Trojan Btcmine

USFT_EXT.DLL size: 861696 bytes
USFT_EXT.DLL hash: F9B32EBC7C42D8845D87761BA3EF13C2

Created files:

%Temporary Internet Files%\Content.IE5\9ZXDM8KN\phatk[1].cl
%SysDir%\config\systemprofile\My Documents\Windows\B\miner.dll
%SysDir%\config\systemprofile\My Documents\Windows\B\phatk.cl
%SysDir%\config\systemprofile\My Documents\Windows\B\phatk.ptx
%SysDir%\config\systemprofile\My Documents\Windows\B\usft_ext.dll
%SysDir%\config\systemprofile\My Documents\Windows\B\winsvchost.exe
%SysDir%\config\systemprofile\My Documents\Windows\U\miner.dll
%SysDir%\config\systemprofile\My Documents\Windows\U\phatk.cl
%SysDir%\config\systemprofile\My Documents\Windows\U\phatk.ptx
%SysDir%\config\systemprofile\My Documents\Windows\U\usft_ext.dll
%SysDir%\config\systemprofile\My Documents\Windows\U\winx.exe

Detected by UnHackMe:

USFT_EXT.DLL
Default location: %SYSDIR%\CONFIG\SYSTEMPROFILE\MY DOCUMENTS\WINDOWS\B\USFT_EXT.DLL

Dropper information:
MD5: c9af110d33e56ddc454d0193c85f6991
File size: 47104 bytes

Leave a Reply