LLYCUSS32.EXE – Trojan SuspiciousFile

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

LLYCUSS32.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
LLYCUSS32.EXE 379561c99b3d7a24454e7acfcf34c27b Trojan SuspiciousFile
LLYCUSS32.EXE 379561c99b3d7a24454e7acfcf34c27b Backdoor RBot
LLYCUSS32.EXE 379561c99b3d7a24454e7acfcf34c27b Trojan CI

LLYCUSS32.EXE size: 20761 bytes
LLYCUSS32.EXE hash: 379561C99B3D7A24454E7ACFCF34C27B

Created files:

%SysDir%\llycuss32.exe

Autostart registry keys:

HKLM\Software\Microsoft\ACTIVE SETUP\INSTALLED COMPONENTS\{8E5C7D2E-7A0D-3C1E-6A4C-04C6C106E8B8}\StubPath: %WinDir%\System32\llycuss32.exe 2
HKLM\Software\Microsoft\Windows\CurrentVersion\RUN\lycuss32: %WinDir%\System32\llycuss32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RUNONCE\*lycuss32: %WinDir%\System32\llycuss32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RUN\lycuss32: %WinDir%\System32\llycuss32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RUNONCE\*lycuss32: %WinDir%\System32\llycuss32.exe

Detected by UnHackMe:

LLYCUSS32.EXE
Default location: %SYSDIR%\LLYCUSS32.EXE

Dropper information:
MD5: 379561c99b3d7a24454e7acfcf34c27b
File size: 20761 bytes

Leave a Reply