PSSETUP.EXE – Trojan Delf

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PSSETUP.EXE – Trojan Delf removal

FileMD5Virus Alias
PSSETUP.EXE 5cbe23f1d63c10fb35c6313e9a061f43 Trojan Delf
PSSETUP.EXE 5cbe23f1d63c10fb35c6313e9a061f43 Trojan LdPinch

PSSETUP.EXE size: 2243584 bytes
PSSETUP.EXE hash: 5CBE23F1D63C10FB35C6313E9A061F43

Created files:

%TEMP%\IXP000.TMP\ps.exe
%TEMP%\RarSFX0\install.exe
%TEMP%\RarSFX0\pssetup.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

PSSETUP.EXE
Default location: %TEMP%\RARSFX0\PSSETUP.EXE

Dropper information:
MD5: 2c8b389d59daefa1ecb38743aeca3d94
File size: 1174528 bytes

Leave a Reply