Solved! Use FLASH.EXE (Trojan Tibia) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

FLASH.EXE – Trojan Tibia removal

FileMD5Virus Alias
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan Tibia
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan SuspiciousFile
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan Malware.Obscu
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan Generic
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan Xema
FLASH.EXE f03c834fe5ce676bc5458cfbeea8d8ec Trojan Agent

FLASH.EXE size: 38400 bytes
FLASH.EXE hash: F03C834FE5CE676BC5458CFBEEA8D8EC

Created files:

%WinDir%\flash.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp
%Temp%\67BA8C.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\frame1logon\Type: 10010000
HKLM\System\CurrentControlSet\Services\frame1logon\Start: 02000000
HKLM\System\CurrentControlSet\Services\frame1logon\DisplayName: frame2service
HKLM\System\CurrentControlSet\Services\frame1logon\ImagePath: %WinDir%\flash.exe

Detected by UnHackMe:

FLASH.EXE
Default location: %WinDir%\FLASH.EXE

Dropper information:
MD5: f03c834fe5ce676bc5458cfbeea8d8ec
File size: 38400 bytes

Leave a Reply