Solved! Use 40644944.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

40644944.EXE – Trojan Artemis removal

FileMD5Virus Alias
40644944.EXE 93bfea9d4f44a9d95350b0aeddeeacfe Trojan Artemis
40644944.EXE 93bfea9d4f44a9d95350b0aeddeeacfe Trojan SuspiciousFile
40644944.EXE 93bfea9d4f44a9d95350b0aeddeeacfe Trojan Generic
40644944.EXE 93bfea9d4f44a9d95350b0aeddeeacfe Trojan Siggen
40644944.EXE 93bfea9d4f44a9d95350b0aeddeeacfe Trojan Agent

40644944.EXE size: 57344 bytes
40644944.EXE hash: 93BFEA9D4F44A9D95350B0AEDDEEACFE

Created files:

C:\40644944.exe
%Program Files%\Microsoft\DesktopLayer.exe
%Program Files%\Microsoft\DesktopLayerSrv.exe
%Temp%\FF53.dmp

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: c:\windows\System32\userinit.exe,,virusshare_000525fd2b61e1c92b6c4c685851b330srv.exe

Detected by UnHackMe:

40644944.EXE
Default location: C:\40644944.EXE

Dropper information:
MD5: 000525fd2b61e1c92b6c4c685851b330
File size: 172544 bytes

Leave a Reply