RINST.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

RINST.EXE – Trojan Downloader removal

FileMD5Virus Alias
RINST.EXE fbe4bab53f74d3049ef4b306d4cd8742 Trojan Downloader
RINST.EXE fbe4bab53f74d3049ef4b306d4cd8742 Trojan PAK_Generic
RINST.EXE fbe4bab53f74d3049ef4b306d4cd8742 Trojan JboxGeneric
RINST.EXE fbe4bab53f74d3049ef4b306d4cd8742 Trojan Jbox
RINST.EXE fbe4bab53f74d3049ef4b306d4cd8742 Trojan Small

RINST.EXE size: 7680 bytes
RINST.EXE hash: FBE4BAB53F74D3049EF4B306D4CD8742

Created files:

%SysDir%\1033\dwintl.dll
%SysDir%\12520437.cpx
%SysDir%\12520850.cpx
%SysDir%\6to4svc.dll
%SysDir%\aaaamon.dll
%SysDir%\aaclient.dll
%SysDir%\access.cpl
%SysDir%\acctres.dll
%SysDir%\accwiz.exe
%SysDir%\acledit.dll
%SysDir%\aclui.dll
%SysDir%\activeds.dll
%SysDir%\activeds.tlb
%SysDir%\actmovie.exe
%SysDir%\bpk.exe
%SysDir%\bpkhk.dll
%SysDir%\bpkwb.dll
%SysDir%\pk.bin
%SysDir%\rinst.exe
%TEMP%\RarSFX0\bpk.exe
%TEMP%\RarSFX0\bpkhk.dll
%TEMP%\RarSFX0\bpkvw.exe
%TEMP%\RarSFX0\bpkwb.dll
%TEMP%\RarSFX0\pk.bin
%TEMP%\RarSFX0\rinst.exe

Detected by UnHackMe:

RINST.EXE
Default location: %SYSDIR%\RINST.EXE

Dropper information:
MD5: 2144d4f588bfac6b40b60077a5e70fe8
File size: 291438 bytes

Leave a Reply