Fake Antivirus Winwebsec – npf.sys – 08218c9a2d7e7a23af21e43d1b0fbef1

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

Fake Antivirus Winwebsec
Also known as: Fake Antivirus SecurityTool, Trojan Kryptik
SHA256: 436ca4010aa7af7d2a73bda39f8ed471abd9e309cf5cab68ae63f2f4f782d912
SHA1: 659081be460a97cca85314fc4b56369807d3edbc
MD5: 08218c9a2d7e7a23af21e43d1b0fbef1
File size: 800768 bytes

Created files:

%SysDir%\drivers\npf.sys – Fake Antivirus Winwebsec

Fake Antivirus Winwebsec created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\AmdAgent: 08218C9A2D7E7A23AF21E43D1B0FBEF1.EXE

Leave a Reply