GUARDER.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

GUARDER.EXE – Trojan Downloader removal

FileMD5Virus Alias
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan Downloader
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan SuspiciousFile
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan Generic
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan Genome
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan Webprefix
GUARDER.EXE 398e6b57354ac2c61fdab683c4137f99 Trojan Agent

GUARDER.EXE size: 99328 bytes
GUARDER.EXE hash: 398E6B57354AC2C61FDAB683C4137F99

Created files:

%Program Files Common%\Shared\Guarder.exe
%Program Files Common%\Shared\svchost.exe
%TEMP%\4110D765.TP
%TEMP%\m1.exe
%TEMP%\UnicodeFile.bin

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Lazyer01\Type: 01000000
HKLM\System\CurrentControlSet\Services\Lazyer01\Start: 03000000
HKLM\System\CurrentControlSet\Services\Lazyer01\DisplayName: Lazyer01
HKLM\System\CurrentControlSet\Services\Lazyer01\ImagePath: %TEMP%\4110D765.TP

Detected by UnHackMe:

GUARDER.EXE
Default location: %PROGRAM FILES COMMON%\SHARED\GUARDER.EXE

Dropper information:
MD5: 3477d1897ffbb649a05bd9c2b189e8c1
File size: 1354240 bytes

Leave a Reply