I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
rtproc32.exe – Trojan Binder removal
| File | Virus Alias |
|---|---|
| rtproc32.exe | Trojan Binder |
| rtproc32.exe | Trojan Downloader.Generic |
| rtproc32.exe | Trojan Delf |
| rtproc32.exe | Backdoor RBot |
| rtproc32.exe | Trojan Small |
| rtproc32.exe | Trojan ZBot |
Created files:
%Program Files Common%\System\rtproc32.exe – Trojan Binder
%SysDir%\ghsvc.exe – Trojan Binder
%WinDir%\TEMP\DOOM.EXE – Trojan Binder
%WinDir%\TEMP\GHSVC.EXE – Trojan Binder
%WinDir%\TEMP\RTPROC32.EXE – Trojan Binder
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Runtime Process for Win32 Services: %Program Files Common%\System\rtproc32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Generic Host Process for Win32 Services: ghsvc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices\Generic Host Process for Win32 Services: ghsvc.exe
Detected by UnHackMe:
rtproc32.exe
Default location: %Program Files Common%\System\rtproc32.exe
Dropper information:
SHA256: b973d265b05b1b06799863e5418b534bea5652ede6642129868037ec94aeae2f
SHA1: ec622d1f1c6276216c249173ecec4a9fff42094c
MD5: 67cee1130eb7c5eae1958b52e2fef7c2
File size: 199168 bytes