SYSTEM.EXE – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SYSTEM.EXE – Trojan CoinMiner removal

FileMD5Virus Alias
SYSTEM.EXE e2c655db1ccd3a632ded94eacb933643 Trojan CoinMiner
SYSTEM.EXE e2c655db1ccd3a632ded94eacb933643 Trojan Bitcoin
SYSTEM.EXE e2c655db1ccd3a632ded94eacb933643 Trojan Btcmine
SYSTEM.EXE e2c655db1ccd3a632ded94eacb933643 Trojan Generic
SYSTEM.EXE e2c655db1ccd3a632ded94eacb933643 Trojan Agent

SYSTEM.EXE size: 187904 bytes
SYSTEM.EXE hash: E2C655DB1CCD3A632DED94EACB933643

Created files:

C:\Windows\syso\critical\libcurl-4.dll
C:\Windows\syso\critical\libcurl.dll
C:\Windows\syso\critical\pthreadGC2.dll
C:\Windows\syso\critical\system.exe
C:\Windows\syso\critical\zlib1.dll
C:\Windows\system32\nircmd.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update: C:\Windows\syso\critical\antivirus.bat

Detected by UnHackMe:

SYSTEM.EXE
Default location: %WinDir%\SYSO\CRITICAL\SYSTEM.EXE

Dropper information:
MD5: a9e135b3f32fd24a59e603410c798d6c
File size: 593894 bytes

Leave a Reply