REALTEK.EXE – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

REALTEK.EXE – Trojan CoinMiner removal

FileMD5Virus Alias
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Trojan CoinMiner
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Trojan Downloader
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Trojan Generic.KD
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Worm AMN
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Trojan Agent
REALTEK.EXE 0120708c9de57a912e1da94420bb7343 Trojan Crypt

REALTEK.EXE size: 67072 bytes

Created files:

%SysDir%\config\systemprofile\My Documents\Services\IntelGraphics.exe
%SysDir%\config\systemprofile\My Documents\Windows\Realtek.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\RealtekHDAudioManager: %WinDir%\System32\config\Systemprofile\My Documents\Services\IntelGraphics.exe

Detected by UnHackMe:

REALTEK.EXE
Default location: %SYSDIR%\CONFIG\SYSTEMPROFILE\MY DOCUMENTS\WINDOWS\REALTEK.EXE

Leave a Reply