SYSTEM.PIF – Trojan Artemis

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SYSTEM.PIF – Trojan Artemis removal

FileMD5Virus Alias
SYSTEM.PIF 7bd4a1daa49a42d00e5afbb893bafcf0 Trojan Artemis
SYSTEM.PIF 7bd4a1daa49a42d00e5afbb893bafcf0 Trojan SuspiciousFile
SYSTEM.PIF 7bd4a1daa49a42d00e5afbb893bafcf0 Trojan Androm
SYSTEM.PIF 7bd4a1daa49a42d00e5afbb893bafcf0 Trojan CI
SYSTEM.PIF 7bd4a1daa49a42d00e5afbb893bafcf0 Trojan Siggen

SYSTEM.PIF size: 893332 bytes
SYSTEM.PIF hash: 7BD4A1DAA49A42D00E5AFBB893BAFCF0

Created files:

%AppData%\Help\client.exe
%UserProfile%\Start Menu\Programs\Startup\system.pif
%Common Startmenu%\Programs\Startup\system.pif

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ClientHelper: %WinDir%\System32\config\Systemprofile\Application Data\Help\client.exeSoftware\Microsoft\Windows\CurrentVersion\Explorer\Shell F
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ClientHelper: %WinDir%\System32\config\Systemprofile\Application Data\Help\client.exeSoftware\Microsoft\Windows\CurrentVersion\Explorer\Shell F

Detected by UnHackMe:

SYSTEM.PIF
Default location: %USERPROFILE%\START MENU\PROGRAMS\STARTUP\SYSTEM.PIF

Dropper information:
MD5: 7bd4a1daa49a42d00e5afbb893bafcf0
File size: 893332 bytes

Leave a Reply