6WF15QF16.EXE – Trojan Barys

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

6WF15QF16.EXE – Trojan Barys removal

FileMD5Virus Alias
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan Barys
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan SuspiciousFile
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan Artemis
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan XPACK
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan Eldorado
6WF15QF16.EXE 7ac8ef8c17270348ce7acf505a71f57e Trojan DNAScan

6WF15QF16.EXE size: 693248 bytes
6WF15QF16.EXE hash: 7AC8EF8C17270348CE7ACF505A71F57E

Created files:

C:\directory\CyberGate\6wf15qf16\6wf15qf16.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{8B8H278V-8TY2-207X-S6F7-TK5Y18GW0VH2}\StubPath: c:\directory\CyberGate\6wf15qf16\6wf15qf16.exe Restart
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 63003A005C006400690072006500630074006F00720079005C004300790062006500720047006100740065005C003600770066003100350071006600310036005C003600770066003100350071006600310036002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 63003A005C006400690072006500630074006F00720079005C004300790062006500720047006100740065005C003600770066003100350071006600310036005C003600770066003100350071006600310036002E006500780065000000

Detected by UnHackMe:

6WF15QF16.EXE
Default location: C:\DIRECTORY\CYBERGATE\6WF15QF16\6WF15QF16.EXE

Dropper information:
MD5: 7ac8ef8c17270348ce7acf505a71f57e
File size: 693248 bytes

Leave a Reply