FRAMEWORKUPDATE.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

FRAMEWORKUPDATE.EXE – Trojan Agent removal

FileMD5Virus Alias
FRAMEWORKUPDATE.EXE 6ea61141e7a081d5a67dccdd5af5c08f Trojan Agent
FRAMEWORKUPDATE.EXE 6ea61141e7a081d5a67dccdd5af5c08f Trojan Eldorado
FRAMEWORKUPDATE.EXE 6ea61141e7a081d5a67dccdd5af5c08f Trojan Downloader
FRAMEWORKUPDATE.EXE 6ea61141e7a081d5a67dccdd5af5c08f Trojan Delf

FRAMEWORKUPDATE.EXE size: 721408 bytes
FRAMEWORKUPDATE.EXE hash: 6EA61141E7A081D5A67DCCDD5AF5C08F

Created files:

%TEMP%\Microsoft\FrameworkUpdate.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%TEMP%\Microsoft\FrameworkUpdate.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Framework: %TEMP%\Microsoft\FrameworkUpdate.exe

Detected by UnHackMe:

FRAMEWORKUPDATE.EXE
Default location: %TEMP%\MICROSOFT\FRAMEWORKUPDATE.EXE

Dropper information:
MD5: 6ea61141e7a081d5a67dccdd5af5c08f
File size: 721408 bytes

Leave a Reply