COMMANDPROMPT.SYSM – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

COMMANDPROMPT.SYSM – Trojan Downloader removal

FileMD5Virus Alias
COMMANDPROMPT.SYSM 5d5f4bf7200c60363094f9d8d79bbe7c Trojan Downloader
COMMANDPROMPT.SYSM 5d5f4bf7200c60363094f9d8d79bbe7c Trojan Generic
COMMANDPROMPT.SYSM 5d5f4bf7200c60363094f9d8d79bbe7c Trojan Hllw
COMMANDPROMPT.SYSM 5d5f4bf7200c60363094f9d8d79bbe7c Trojan Agent

COMMANDPROMPT.SYSM size: 78335 bytes
COMMANDPROMPT.SYSM hash: 5D5F4BF7200C60363094F9D8D79BBE7C

Created files:

C:\windows\system32\CommandPrompt.Sysm
C:\windows\system32\Desktop.sysm
C:\windows\system32\Windows 3D.scr
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\csrss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\csrss.exe?
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\lsass.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\msvbvm60.dll
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\Paraysutki_VM_Community
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\services.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\smss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\winlogon.exe
%AppData%\Microsoft\2049
%AppData%\Microsoft\vcww.exe
%UserProfile%\Start Menu\Programs\Startup\Microsoft Connection.msd

Detected by UnHackMe:

COMMANDPROMPT.SYSM
Default location: %SYSDIR%\COMMANDPROMPT.SYSM

Dropper information:
MD5: 2833a0089c4bbb7e086acf1feea2b201
File size: 130050 bytes

Leave a Reply