LLWNMN.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

LLWNMN.EXE – Trojan Agent removal

FileMD5Virus Alias
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Trojan Agent
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Trojan Eldorado
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Trojan DNAScan
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Trojan CI
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Worm AMN
LLWNMN.EXE 73cd2e3b86a7d7f16caaa918ccd24826 Backdoor PcClien

LLWNMN.EXE size: 117572 bytes

Created files:

%SysDir%\llwnmn.exe
%WinDir%\Temp\8185.exe
%WinDir%\Temp\adobe_update.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\chun\Type: 10000000
HKLM\System\CurrentControlSet\Services\chun\Start: 02000000
HKLM\System\CurrentControlSet\Services\chun\DisplayName: chun
HKLM\System\CurrentControlSet\Services\chun\ImagePath: %WinDir%\System32\llwnmn.exe
HKLM\System\CurrentControlSet\Services\chun\Description: chun

Detected by UnHackMe:

LLWNMN.EXE
Default location: %SYSDIR%\LLWNMN.EXE
Dropper information:
MD5: dd1305783688904271839b44388ce023
File size: 672268 bytes

Leave a Reply