FILEKAN.EXE – Trojan Crypt removal

FILEKAN.EXE size: 45056 bytes

Created files:

C:\tel.xls.exe
%WinDir%\BACKINF.TAB
%WinDir%\Session.exe
%WinDir%\svchost.exe
%SysDir%\FileKan.exe
%SysDir%\SocksA.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ASocksrv: SocksA.exe

Detected by UnHackMe:

FILEKAN.EXE
Default location: %SYSDIR%\FILEKAN.EXE