PRESIDENT.EXE – Trojan Tibia

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PRESIDENT.EXE – Trojan Tibia removal

FileMD5Virus Alias
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan Tibia
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan Malware.Obscu
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan Generic
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan Xema
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan Agent
PRESIDENT.EXE ff140e30290f28e80c0924f85ca8fa4b Trojan ZBot

PRESIDENT.EXE size: 38400 bytes
PRESIDENT.EXE hash: FF140E30290F28E80C0924F85CA8FA4B

Created files:

%WinDir%\president.exe
%TEMP%\73656C.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\president-kbr\Type: 10010000
HKLM\System\CurrentControlSet\Services\president-kbr\Start: 02000000
HKLM\System\CurrentControlSet\Services\president-kbr\DisplayName: president
HKLM\System\CurrentControlSet\Services\president-kbr\ImagePath: %WinDir%\president.exe

Detected by UnHackMe:

PRESIDENT.EXE
Default location: %WinDir%\PRESIDENT.EXE

Dropper information:
MD5: ff140e30290f28e80c0924f85ca8fa4b
File size: 38400 bytes

Leave a Reply