CLOSEMP.EXE – Trojan BadReputation

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

CLOSEMP.EXE – Trojan BadReputation removal

FileMD5Virus Alias
CLOSEMP.EXE d4a7c7ba79c05fb96bc38b8aa7c064eb Trojan BadReputation

CLOSEMP.EXE size: 20480 bytes
CLOSEMP.EXE hash: D4A7C7BA79C05FB96BC38B8AA7C064EB

Created files:

%Program Files%\AlcorMP_6980\8081\BIN\K9F4G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\K9K8G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\K9WAG.bin
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_DD.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_HYNIX.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_HYNIX_DD.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_HYNIX_DD.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_ST.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_MLC_ST.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_DD.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_DD.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_HYNIXST.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_HYNIXST.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_INFINEON.bin
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_MICRON.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_MICRON.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_MICRON_4G.bin
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_MICRON_ZoTek.BIN
%Program Files%\AlcorMP_6980\8081\BIN\LB_SLC_NCP.BIN
%Program Files%\AlcorMP_6980\8081\BIN\RENE_05G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\RENE_1G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\RENE_4G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\RENE_512M.BIN
%Program Files%\AlcorMP_6980\8081\BIN\SB_MLC.BIN
%Program Files%\AlcorMP_6980\8081\BIN\SB_SLC.BIN
%Program Files%\AlcorMP_6980\8081\BIN\SB_SLC.BIN_STS
%Program Files%\AlcorMP_6980\8081\BIN\SB_SLC_DD.bin
%Program Files%\AlcorMP_6980\8081\BIN\SB_SLC_INFINEON.bin
%Program Files%\AlcorMP_6980\8081\BIN\SB_SLC_ST.BIN
%Program Files%\AlcorMP_6980\8081\BIN\TOS_MLC_2G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\TOS_MLC_4G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\TOS_MLC_8G.BIN
%Program Files%\AlcorMP_6980\8081\BIN\vssver.scc
%Program Files%\AlcorMP_6980\8081\DAT\LB_SLC_1G.DAT_HALF
%Program Files%\AlcorMP_6980\82\BIN\K9F4G.BIN
%Program Files%\AlcorMP_6980\82\BIN\K9K8G.BIN
%Program Files%\AlcorMP_6980\82\BIN\K9WAG.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC_DD.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC_HYNIX.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC_HYNIX_DD.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC_MICRON.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_MLC_MICRON_DD.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_DD.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_HYNIXST.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_INFINEON.bin
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_MICRON.BIN
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_MICRON_4G.bin
%Program Files%\AlcorMP_6980\82\BIN\LB_SLC_NCP.BIN
%Program Files%\AlcorMP_6980\82\BIN\RENE_1G.bin
%Program Files%\AlcorMP_6980\82\BIN\RENE_4G.bin
%Program Files%\AlcorMP_6980\82\BIN\SB_MLC.BIN
%Program Files%\AlcorMP_6980\82\BIN\SB_SLC.BIN
%Program Files%\AlcorMP_6980\82\BIN\SB_SLC_DD.bin
%Program Files%\AlcorMP_6980\82\BIN\SB_SLC_INFINEON.bin
%Program Files%\AlcorMP_6980\82\BIN\SB_SLC_ST.BIN
%Program Files%\AlcorMP_6980\82\BIN\SD_MLC.BIN
%Program Files%\AlcorMP_6980\82\BIN\SD_MLC_16.bin
%Program Files%\AlcorMP_6980\82\BIN\SD_MLC_1G.BIN
%Program Files%\AlcorMP_6980\82\BIN\SD_MLC_2G.BIN
%Program Files%\AlcorMP_6980\82\BIN\SD_MLC_2G_16.BIN
%Program Files%\AlcorMP_6980\82\BIN\TOS_MLC_2G.BIN
%Program Files%\AlcorMP_6980\82\BIN\TOS_MLC_4G.BIN
%Program Files%\AlcorMP_6980\82\BIN\TOS_MLC_8G.BIN
%Program Files%\AlcorMP_6980\82\BIN\vssver.scc
%Program Files%\AlcorMP_6980\82\DAT\vssver.scc
%Program Files%\AlcorMP_6980\AlcorMP.exe
%Program Files%\AlcorMP_6980\CloseMP.exe
%Program Files%\AlcorMP_6980\Complete.exe

Detected by UnHackMe:

CLOSEMP.EXE
Default location: %PROGRAM FILES%\ALCORMP_6980\CLOSEMP.EXE

Dropper information:
MD5: dfd05c365f6274299b378c2519fafccd
File size: 788486 bytes

Leave a Reply