PHOTOS~1.EXE – Trojan KeygenRiskware

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PHOTOS~1.EXE – Trojan KeygenRiskware removal

FileMD5Virus Alias
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan KeygenRiskware
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan UnwantedProgram
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan SuspiciousFile
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan Generic
PHOTOS~1.EXE b824c5d7bea0d803440c19744c6543ef Trojan Agent

PHOTOS~1.EXE size: 59904 bytes
PHOTOS~1.EXE hash: B824C5D7BEA0D803440C19744C6543EF

Created files:

%TEMP%\IXP000.TMP\PHOTOS~1.EXE
%TEMP%\IXP000.TMP\?????~1.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

PHOTOS~1.EXE
Default location: %TEMP%\IXP000.TMP\PHOTOS~1.EXE

Dropper information:
MD5: 7a6ff4818de4e7724acf0a08f299fcae
File size: 606884 bytes

Leave a Reply