NWTRAY.EXE – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NWTRAY.EXE – Trojan CoinMiner removal

FileMD5Virus Alias
NWTRAY.EXE 9a3475a99e7084ef8834e38f9c583a2f Trojan CoinMiner
NWTRAY.EXE 9a3475a99e7084ef8834e38f9c583a2f Suspicious File

NWTRAY.EXE size: 133120 bytes
NWTRAY.EXE hash: 9A3475A99E7084EF8834E38F9C583A2F

Created files:

%Program Files%\%appdata%\torrent\alcc.exe
%Program Files%\%appdata%\torrent\diablo121016.cl
%Program Files%\%appdata%\torrent\diakgcn121016.cl
%Program Files%\%appdata%\torrent\libcurl-4.dll
%Program Files%\%appdata%\torrent\libeay32.dll
%Program Files%\%appdata%\torrent\libidn-11.dll
%Program Files%\%appdata%\torrent\liblnx.cl
%Program Files%\%appdata%\torrent\libpdcurses.dll
%Program Files%\%appdata%\torrent\libusb-1.0.dll
%Program Files%\%appdata%\torrent\NwTray.exe
%Program Files%\%appdata%\torrent\phatk121016.cl
%Program Files%\%appdata%\torrent\poclbm121016.cl
%Program Files%\%appdata%\torrent\pthreadGC2.dll
%Program Files%\%appdata%\torrent\ssleay32.dll
%Program Files%\%appdata%\torrent\zlib1.dll

Detected by UnHackMe:

NWTRAY.EXE
Default location: %PROGRAM FILES%\%APPDATA%\TORRENT\NWTRAY.EXE

Dropper information:
MD5: 67777b267fcbd2cff5d172e0b86b0683
File size: 1279869 bytes

Leave a Reply