N88.EXE – Trojan Invader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

N88.EXE – Trojan Invader removal

FileMD5Virus Alias
N88.EXE 145cd83350d788df3a651d5cfca96975 Trojan Invader
N88.EXE 145cd83350d788df3a651d5cfca96975 Trojan Generic
N88.EXE 145cd83350d788df3a651d5cfca96975 Trojan Downloader
N88.EXE 145cd83350d788df3a651d5cfca96975 Trojan CI

N88.EXE size: 310934 bytes
N88.EXE hash: 145CD83350D788DF3A651D5CFCA96975

Created files:

C:\Temp\FuckNP.sys
C:\Temp\GuoNP.sys
C:\Temp\n88.exe
C:\Temp\xpFuckNP.sys
C:\windows\system32\ups.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Recover\Type: 01000000
HKLM\System\CurrentControlSet\Services\Recover\Start: 03000000
HKLM\System\CurrentControlSet\Services\Recover\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Recover\DisplayName: Recover
HKLM\System\CurrentControlSet\Services\Recover\ImagePath: 5C003F003F005C0063003A005C00740065006D0070005C00470075006F004E0050002E007300790073000000

Detected by UnHackMe:

N88.EXE
Default location: C:\TEMP\N88.EXE

Dropper information:
MD5: 145cd83350d788df3a651d5cfca96975
File size: 310934 bytes

Leave a Reply