Solved! Use ML.EXE (Trojan MailPassView) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

ML.EXE – Trojan MailPassView removal

File MD5 Virus Alias
ML.EXE ba0ea0fb29aee3ff430e444c2aaab960 Trojan MailPassView
ML.EXE ba0ea0fb29aee3ff430e444c2aaab960 Trojan, Suspicious File
ML.EXE ba0ea0fb29aee3ff430e444c2aaab960 Trojan Generic
ML.EXE ba0ea0fb29aee3ff430e444c2aaab960 Trojan Delf

ML.EXE size: 72192 bytes
ML.EXE hash: BA0EA0FB29AEE3FF430E444C2AAAB960

Created files:

%WinDir%\drwtsn32.exe
%WinDir%\ml.exe
%WinDir%\ml.nkd
%WinDir%\ms.exe
%WinDir%\ms.nkd
%WinDir%\nkd.nkd
%WinDir%\ns.exe
%WinDir%\ns.nkd
%WinDir%\pv.exe
%WinDir%\pv.nkd

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer: %WinDir%\drwtsn32.exe

Detected by UnHackMe:

ML.EXE
Default location: %WinDir%\ML.EXE

Dropper information:
MD5: 03ccd38662ea18ff722cf14a7a26aa4c
File size: 489472 bytes

Leave a Reply