I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
SYSEXP32.EXE – Trojan Agent removal
| File | MD5 | Virus Alias |
|---|---|---|
| SYSEXP32.EXE | b417e7b504bb99a24eb16dee0f0aa1bb | Trojan Agent |
| SYSEXP32.EXE | b417e7b504bb99a24eb16dee0f0aa1bb | Trojan Xema |
| SYSEXP32.EXE | b417e7b504bb99a24eb16dee0f0aa1bb | Trojan Comame |
| SYSEXP32.EXE | b417e7b504bb99a24eb16dee0f0aa1bb | Trojan PAM |
| SYSEXP32.EXE | b417e7b504bb99a24eb16dee0f0aa1bb | Trojan Crypt |
SYSEXP32.EXE size: 254566 bytes
SYSEXP32.EXE hash: B417E7B504BB99A24EB16DEE0F0AA1BB
Created files:
C:\Windows\Help\intret.cnt
C:\Windows\Syssrc32.exe
C:\Windows\System\applets.exe
C:\Windows\System\Explorer.exe
C:\Windows\System\fndfst32.exe
C:\Windows\System\mplayerw.exe
C:\Windows\System\Sysexp32.exe
C:\Windows\TEMP\1478E5.dmp
Autostart registry keys:
HKLM\Software\Classes\txtfile\shell\open\command\Explore: %SystemRoot%\System32\NOTEPAD.EXE %1
HKLM\Software\Classes\txtfile\shell\open\command : C:\Windows\System\Sysexp32.exe %1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System applets: C:\Windows\System\applets.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Syssrc32: C:\Windows\Syssrc32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\fndfst32: C:\Windows\System\fndfst32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer Shell: C:\Windows\System\Explorer.exe
Detected by UnHackMe:
SYSEXP32.EXE
Default location: %WinDir%\SYSTEM\SYSEXP32.EXE
Dropper information:
MD5: 1372cca72831ebee7acb26b8db02eef9
File size: 242268 bytes