I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
ROUTELLEADMIN.EXE – Trojan SuspiciousFile removal
File | MD5 | Virus Alias |
---|---|---|
ROUTELLEADMIN.EXE | 3c4693c32fbf28f4fb243aedab6c7bfb | Trojan SuspiciousFile |
ROUTELLEADMIN.EXE size: 2558976 bytes
ROUTELLEADMIN.EXE hash: 3C4693C32FBF28F4FB243AEDAB6C7BFB
Created files:
%Program Files Common%\Microsoft Shared\MSINFO\scvhosts
%Program Files%\Fixed_Directory_Name\libmySQL.dll
%Program Files%\Fixed_Directory_Name\RoutelleAdmin.exe
%SysDir%\config\systemprofile\Desktop\UnicodeFile.bin
%TEMP%\sevhost.exe
%TEMP%\???????????.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\scvhostp\Type: 10010000
HKLM\System\CurrentControlSet\Services\scvhostp\Start: 02000000
HKLM\System\CurrentControlSet\Services\scvhostp\DisplayName: scvhostp
HKLM\System\CurrentControlSet\Services\scvhostp\ImagePath: %Program Files Common%\Microsoft Shared\MSINFO\scvhosts -k
Detected by UnHackMe:
ROUTELLEADMIN.EXE
Default location: %PROGRAM FILES%\FIXED_DIRECTORY_NAME\ROUTELLEADMIN.EXE
Dropper information:
MD5: def185d788429396b5037ce4318203b3
File size: 1677312 bytes