PHOTOS~1.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PHOTOS~1.EXE – Trojan Agent removal

FileMD5Virus Alias
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan Agent
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan UnwantedProgram
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan SuspiciousFile

PHOTOS~1.EXE size: 59904 bytes
PHOTOS~1.EXE hash: B824C5D7BEA0D803440C19744C6543EF

Created files:

%TEMP%\IXP000.TMP\PHOTOS~1.EXE
%TEMP%\IXP000.TMP\?????~1.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

PHOTOS~1.EXE
Default location: %TEMP%\IXP000.TMP\PHOTOS~1.EXE

Dropper information:
MD5: fdd208c1a50029673c5bf626b472b158
File size: 561828 bytes

Leave a Reply