KWSTRAY.EXE – Trojan FakeAV

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

KWSTRAY.EXE – Trojan FakeAV removal

FileMD5Virus Alias
KWSTRAY.EXE bb4c7818248c81bafdb8845d7513ee92 Trojan FakeAV

KWSTRAY.EXE size: 505240 bytes
KWSTRAY.EXE hash: BB4C7818248C81BAFDB8845D7513EE92

Created files:

%AppData%\kwsafe\KSAFE.exe
%AppData%\kwsafe\kswbc.dll
%AppData%\kwsafe\kswebshield.dll
%AppData%\kwsafe\kwssp.dll
%AppData%\kwsafe\kwstray.exe
%AppData%\kwsafe\kwsui.dll

Detected by UnHackMe:

KWSTRAY.EXE
Default location: %APPDATA%\KWSAFE\KWSTRAY.EXE

Dropper information:
MD5: 376cf6a51ca87bf29f1a5b56afab8321
File size: 727693 bytes

Leave a Reply