I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
.EXE – Trojan Eldorado removal
| File | MD5 | Virus Alias |
|---|---|---|
| .EXE | 6734e74183d98e56ffc4d79b2414ec64 | Trojan Eldorado |
| .EXE | 6734e74183d98e56ffc4d79b2414ec64 | Trojan Agent |
.EXE size: 38710 bytes
.EXE hash: 6734E74183D98E56FFC4D79B2414EC64
Created files:
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\ .exe
%WinDir%\system\wincirl.com
%SysDir%\SVCH0ST.EXE
%Common Startmenu%\Programs\Startup\ .exe
%AppData%\Microsoft\Internet Explorer\Quick Launch\TEST.exe
%Favorites%\Links\www.test.com
%Startup%\ .exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe %WinDir%/System32/SVCH0ST.EXE
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\load: %WinDir%/System/wincirl.com
Detected by UnHackMe:
.EXE
Default location: C:\DOCUMENTS AND SETTINGS\DEFAULT USER\START MENU\PROGRAMS\STARTUP\ .EXE
Dropper information:
MD5: 514519e465f309f99bd455f7d0826485
File size: 138771 bytes