I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
IYYESMS.EXE – Backdoor Farfli removal
| File | MD5 | Virus Alias |
|---|---|---|
| IYYESMS.EXE | f7c4389fd8b2548a39cdaef861b4ce60 | Backdoor Farfli |
| IYYESMS.EXE | f7c4389fd8b2548a39cdaef861b4ce60 | Trojan Eldorado |
| IYYESMS.EXE | f7c4389fd8b2548a39cdaef861b4ce60 | Trojan Agent |
IYYESMS.EXE size: 10571776 bytes
IYYESMS.EXE hash: F7C4389FD8B2548A39CDAEF861B4CE60
Created files:
%Program Files%\Windows NT\Iyyesms.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\MarkTime: 2014-10-14 07:27
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\DisplayName: Qaqmou moaecsky
HKLM\System\CurrentControlSet\Services\Wsqqwk wwqcqsem\ImagePath: %Program Files%\Windows NT\Iyyesms.exe
Detected by UnHackMe:
IYYESMS.EXE
Default location: %PROGRAM FILES%\WINDOWS NT\IYYESMS.EXE
Dropper information:
MD5: 0be879e23a7aff5d0bf7e91b64ac9fad
File size: 86016 bytes