SOFTWARE_131231.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SOFTWARE_131231.EXE – Trojan Downloader removal

FileMD5Virus Alias
SOFTWARE_131231.EXE 33a31e7b2bc455374e5613309bc24191 Trojan Downloader
SOFTWARE_131231.EXE 33a31e7b2bc455374e5613309bc24191 Trojan Eldorado
SOFTWARE_131231.EXE 33a31e7b2bc455374e5613309bc24191 Adware Downware
SOFTWARE_131231.EXE 33a31e7b2bc455374e5613309bc24191 Trojan Agent
SOFTWARE_131231.EXE 33a31e7b2bc455374e5613309bc24191 Trojan Kryptik

SOFTWARE_131231.EXE size: 94616 bytes
SOFTWARE_131231.EXE hash: 33A31E7B2BC455374E5613309BC24191

Created files:

C:\Downloads\Software_131231.exe
C:\rwindows\cgminer.exe
C:\rwindows\libcurl-4.dll
C:\rwindows\libeay32.dll
C:\rwindows\libidn-11.dll
C:\rwindows\librtmp.dll
C:\rwindows\libssh2.dll
C:\rwindows\rwindows.exe
C:\rwindows\scrypt130511.cl
C:\rwindows\ssleay32.dll
C:\rwindows\zlib1.dll
C:\temp\after.exe
C:\temp\cudaminer.exe
C:\temp\cudart32_50_35.dll
C:\temp\down.exe
C:\temp\libcurl-4.dll
C:\temp\minerd.exe
C:\temp\pthreadGC2.dll
C:\temp\pthreadVC2.dll
C:\temp\winstart_1312310410.exe
C:\temp\zlib1.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wstart: C:\temp\winstart_1312310410.exe

Detected by UnHackMe:

SOFTWARE_131231.EXE
Default location: C:\DOWNLOADS\SOFTWARE_131231.EXE

Dropper information:
MD5: e57e9fcf8c90e8428a05206ae357b3bb
File size: 10648576 bytes

Leave a Reply