RINST.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

RINST.EXE – Trojan Downloader removal

FileMD5Virus Alias
RINST.EXE a455ca431e66975d886f1a8cfee8cb9f Trojan Downloader
RINST.EXE a455ca431e66975d886f1a8cfee8cb9f Trojan JboxGeneric
RINST.EXE a455ca431e66975d886f1a8cfee8cb9f Trojan Jbox
RINST.EXE a455ca431e66975d886f1a8cfee8cb9f Trojan Small

RINST.EXE size: 7680 bytes
RINST.EXE hash: A455CA431E66975D886F1A8CFEE8CB9F

Created files:

%SysDir%\1033\dwintl.dll
%SysDir%\12520437.cpx
%SysDir%\12520850.cpx
%SysDir%\6to4svc.dll
%SysDir%\aaaamon.dll
%SysDir%\aaclient.dll
%SysDir%\access.cpl
%SysDir%\acctres.dll
%SysDir%\accwiz.exe
%SysDir%\acledit.dll
%SysDir%\aclui.dll
%SysDir%\activeds.dll
%SysDir%\activeds.tlb
%SysDir%\actmovie.exe
%SysDir%\actxprxy.dll
%SysDir%\admparse.dll
%SysDir%\adptif.dll
%SysDir%\adsldp.dll
%SysDir%\adsldpc.dll
%SysDir%\adsmsext.dll
%SysDir%\adsnds.dll
%SysDir%\adsnt.dll
%SysDir%\adsnw.dll
%SysDir%\advapi32.dll
%SysDir%\advpack.dll
%SysDir%\advpack.dll.mui
%SysDir%\ahui.exe
%SysDir%\alg.exe
%SysDir%\alrsvc.dll
%SysDir%\amcompat.tlb
%SysDir%\amstream.dll
%SysDir%\ansi.sys
%SysDir%\apcups.dll
%SysDir%\append.exe
%SysDir%\apphelp.dll
%SysDir%\bpk.exe
%SysDir%\bpkhk.dll
%SysDir%\bpkwb.dll
%SysDir%\pk.bin
%SysDir%\rinst.exe
%TEMP%\RarSFX0\bpk.exe
%TEMP%\RarSFX0\bpkhk.dll
%TEMP%\RarSFX0\bpkwb.dll
%TEMP%\RarSFX0\pk.bin
%TEMP%\RarSFX0\rinst.exe
%TEMP%\RarSFX0\Update.exe
%TEMP%\RarSFX1\bpk.exe
%TEMP%\RarSFX1\bpkhk.dll
%TEMP%\RarSFX1\bpkwb.dll
%TEMP%\RarSFX1\pk.bin
%TEMP%\RarSFX1\rinst.exe
%TEMP%\RarSFX1\Update.exe

Detected by UnHackMe:

RINST.EXE
Default location: %TEMP%\RARSFX0\RINST.EXE

Dropper information:
MD5: 69e4cc0c951df439d59caa2f9e7b028e
File size: 698694 bytes

Leave a Reply