ROUTELLEADMIN.EXE – Trojan SuspiciousFile

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

ROUTELLEADMIN.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
ROUTELLEADMIN.EXE 3c4693c32fbf28f4fb243aedab6c7bfb Trojan SuspiciousFile

ROUTELLEADMIN.EXE size: 2558976 bytes
ROUTELLEADMIN.EXE hash: 3C4693C32FBF28F4FB243AEDAB6C7BFB

Created files:

%Program Files Common%\Microsoft Shared\MSINFO\scvhosts
%Program Files%\Fixed_Directory_Name\libmySQL.dll
%Program Files%\Fixed_Directory_Name\RoutelleAdmin.exe
%SysDir%\config\systemprofile\Desktop\UnicodeFile.bin
%TEMP%\sevhost.exe
%TEMP%\???????????.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\scvhostp\Type: 10010000
HKLM\System\CurrentControlSet\Services\scvhostp\Start: 02000000
HKLM\System\CurrentControlSet\Services\scvhostp\DisplayName: scvhostp
HKLM\System\CurrentControlSet\Services\scvhostp\ImagePath: %Program Files Common%\Microsoft Shared\MSINFO\scvhosts -k

Detected by UnHackMe:

ROUTELLEADMIN.EXE
Default location: %PROGRAM FILES%\FIXED_DIRECTORY_NAME\ROUTELLEADMIN.EXE

Dropper information:
MD5: def185d788429396b5037ce4318203b3
File size: 1677312 bytes

Leave a Reply