SMARTCLIENTSETTING.EXE – Trojan StartPage

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SMARTCLIENTSETTING.EXE – Trojan StartPage removal

FileMD5Virus Alias
SMARTCLIENTSETTING.EXE d19f91ba3a38d10a4a93711f148347b7 Trojan StartPage

SMARTCLIENTSETTING.EXE size: 395776 bytes
SMARTCLIENTSETTING.EXE hash: D19F91BA3A38D10A4A93711F148347B7

Created files:

%SysDir%\eWebEditorClient.dll
%SysDir%\NewvCommon.ocx
%SysDir%\NewvRecorder.ocx
%SysDir%\WebOffice.ocx
%SysDir%\WinLockDll.dll
%TEMP%\IXP000.TMP\CloseIEWindows.exe
%TEMP%\IXP000.TMP\eWebEditorClient.dll
%TEMP%\IXP000.TMP\NewvCommon.ocx
%TEMP%\IXP000.TMP\NewvRecorder.ocx
%TEMP%\IXP000.TMP\SmartClientSetting.exe
%TEMP%\IXP000.TMP\WebOffice.ocx
%TEMP%\IXP000.TMP\WinLockDll.dll
%TEMP%\PostilDll.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

SMARTCLIENTSETTING.EXE
Default location: %TEMP%\IXP000.TMP\SMARTCLIENTSETTING.EXE

Dropper information:
MD5: b9169be249767f7927590d765a2f7466
File size: 1021952 bytes

Leave a Reply