MFAKSPSKHBJI.EXE – Trojan Swisyn

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

MFAKSPSKHBJI.EXE – Trojan Swisyn removal

FileMD5Virus Alias
MFAKSPSKHBJI.EXE d8f540403a3db0c3b73a5bfd6aca1815 Trojan Swisyn
MFAKSPSKHBJI.EXE d8f540403a3db0c3b73a5bfd6aca1815 Trojan Comame
MFAKSPSKHBJI.EXE d8f540403a3db0c3b73a5bfd6aca1815 Trojan Agent

MFAKSPSKHBJI.EXE size: 1184784 bytes
MFAKSPSKHBJI.EXE hash: D8F540403A3DB0C3B73A5BFD6ACA1815

Created files:

%Program Files%\DNSProtectSupport\svchost.exe
%Program Files%\DNSProtectSupport\svchost.exe.bak
%TEMP%\MfAKspsKHBJI.exe
%TEMP%\NvnpHqVIB.exe
%TEMP%\ZLZfJf.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\DNSProtectSupport\Type: 10000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\Start: 02000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\ImagePath: %Program Files%\DNSProtectSupport\svchost.exe

Detected by UnHackMe:

MFAKSPSKHBJI.EXE
Default location: %TEMP%\MFAKSPSKHBJI.EXE

Dropper information:
MD5: d3153cca04c4ce5b544e3a201cd213e2
File size: 474960 bytes

Leave a Reply