I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
poclbm120327.cl – Trojan CoinMiner removal
| File | Virus Alias |
|---|---|
| poclbm120327.cl | Trojan CoinMiner |
| poclbm120327.cl | Worm Autorun |
| poclbm120327.cl | Worm AMN |
Created files:
%AppData%\Update1\chp.exe – Trojan CoinMiner
%AppData%\Update1\diablo120328.cl – Trojan CoinMiner
%AppData%\Update1\diakgcn120427.cl – Trojan CoinMiner
%AppData%\Update1\libcurl.dll – Trojan CoinMiner
%AppData%\Update1\libeay32.dll – Trojan CoinMiner
%AppData%\Update1\libidn-11.dll – Trojan CoinMiner
%AppData%\Update1\libpdcurses.dll – Trojan CoinMiner
%AppData%\Update1\libssl32.dll – Trojan CoinMiner
%AppData%\Update1\libusb-1.0.dll – Trojan CoinMiner
%AppData%\Update1\poclbm120327.cl – Trojan CoinMiner
%AppData%\Update1\pthreadGC2.dll – Trojan CoinMiner
%AppData%\Update1\scvhost.exe – Trojan CoinMiner
%AppData%\Update1\__tmp_rar_sfx_access_check_6911237 – Trojan CoinMiner
Autostart registry keys:
HKCU\Software\Microsoft\Windows\CurrentVersion\run\adobeupdate: “%AppData%\Update1\bat99.bat”
Detected by UnHackMe:
poclbm120327.cl
Default location: %AppData%\Update1\poclbm120327.cl
Dropper information:
SHA256: 2ad167af1ccc70a2bb545d5354641a4489c2c21cf6583bb7adf8332f1825685f
SHA1: 6a249a00b7c70a865370926b875966756e8562b5
MD5: 7e36b2c3b2f5403a92cc06addf126543
File size: 1366369 bytes