I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
EXPLORER.EXE – Trojan Comame removal
File | MD5 | Virus Alias |
---|---|---|
EXPLORER.EXE | d8cad471f5dec6818d4b8038bd1b07a8 | Trojan Comame |
EXPLORER.EXE | d8cad471f5dec6818d4b8038bd1b07a8 | Trojan Xema |
EXPLORER.EXE | d8cad471f5dec6818d4b8038bd1b07a8 | Trojan PAM |
EXPLORER.EXE | d8cad471f5dec6818d4b8038bd1b07a8 | Trojan Agent |
EXPLORER.EXE | d8cad471f5dec6818d4b8038bd1b07a8 | Trojan Crypt |
EXPLORER.EXE size: 229994 bytes
EXPLORER.EXE hash: D8CAD471F5DEC6818D4B8038BD1B07A8
Created files:
C:\Windows\Help\intret.cnt
C:\Windows\Syssrc32.exe
C:\Windows\System\applets.exe
C:\Windows\System\Explorer.exe
C:\Windows\System\fndfst32.exe
C:\Windows\System\mplayerw.exe
C:\Windows\System\Sysexp32.exe
%Temp%\163841.dmp
Autostart registry keys:
HKLM\Software\Classes\txtfile\shell\open\command\Explore: %SystemRoot%\System32\NOTEPAD.EXE %1
HKLM\Software\Classes\txtfile\shell\open\command : C:\Windows\System\Sysexp32.exe %1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System applets: C:\Windows\System\applets.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Syssrc32: C:\Windows\Syssrc32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\fndfst32: C:\Windows\System\fndfst32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer Shell: C:\Windows\System\Explorer.exe
Detected by UnHackMe:
EXPLORER.EXE
Default location: %WinDir%\SYSTEM\EXPLORER.EXE
Dropper information:
MD5: 0e19a441f357250d6ba5fea5fba35984
File size: 223846 bytes