Rootkit ZeroAccess – ALIAS.exe – 722e344fa5fbe2f5cdfa834d5153244b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Rootkit ZeroAccess
Also known as: Trojan Barys
SHA256: ee45297630678b7c628411ab133e23559e9867feb7f1277efada39f41a94d100
SHA1: a1474e29089cf51ba9bd85eef86d113e518ee002
MD5: 722e344fa5fbe2f5cdfa834d5153244b
File size: 411136 bytes

Created files:

%Temp%\IXP000.TMP\ALIAS.exe – Rootkit ZeroAccess
%Temp%\IXP000.TMP\C32938~1.EXE – Rootkit ZeroAccess

Rootkit ZeroAccess created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%Temp%\IXP000.TMP\”

Leave a Reply