GUPDATE.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

GUPDATE.EXE – Trojan Downloader removal

FileMD5Virus Alias
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan Downloader
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan SuspiciousFile
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan Generic
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan Siggen
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan Agent
GUPDATE.EXE ea80e31ef10b9766bd8f24b97de8e9f7 Trojan ZBot

GUPDATE.EXE size: 33792 bytes
GUPDATE.EXE hash: EA80E31EF10B9766BD8F24B97DE8E9F7

Created files:

%Local AppData%\Google\Update\gupdate.exe
%Local AppData%\Microsoft\Windows\winupdate.exe
%Local AppData%\NVIDIA Corporation\Update\daemonupd.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\NvUpdService: %WinDir%\System32\config\Systemprofile\Local Settings\Application Data\NVIDIA Corporation\Update\daemonupd.exe /app CBFBE7913AD734CD45487BA471251013
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Google Update: %WinDir%\System32\config\Systemprofile\Local Settings\Application Data\Google\Update\gupdate.exe /app CBFBE7913AD734CD45487BA471251013

Detected by UnHackMe:

GUPDATE.EXE
Default location: %LOCAL APPDATA%\GOOGLE\UPDATE\GUPDATE.EXE

Dropper information:
MD5: 250d3b6d04f1fa02368b7bcf5e9e6742
File size: 37663 bytes

Leave a Reply