I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Backdoor Andromeda
Also known as: Trojan Jorik, Trojan Small
SHA256: 4e3b0ee8cf9f78ee2adf275bfa02bc8e032c40ae449db31b2fdb0e39cd7586c6
SHA1: afca1f55397b15c7421542a138b1f0b0fc3a7692
MD5: b39001a2c48ceee5c4e6a5e908fa698a
File size: 50176 bytes
Created files:
%SysDir%\msiexec64.exe – Backdoor Andromeda
Backdoor Andromeda created autostart registry keys:
HKLM\System\CurrentControlSet\Services\MSIconfig\Type: 10000000
HKLM\System\CurrentControlSet\Services\MSIconfig\Start: 02000000
HKLM\System\CurrentControlSet\Services\MSIconfig\DisplayName: Windows Installer Manager
HKLM\System\CurrentControlSet\Services\MSIconfig\ImagePath: %WinDir%\System32\msiexec64.exe