I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
SYSTEM.EXE – Trojan CoinMiner removal
| File | MD5 | Virus Alias |
|---|---|---|
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan CoinMiner |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Bitcoin |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Btcmine |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Generic |
| SYSTEM.EXE | e2c655db1ccd3a632ded94eacb933643 | Trojan Agent |
SYSTEM.EXE size: 187904 bytes
SYSTEM.EXE hash: E2C655DB1CCD3A632DED94EACB933643
Created files:
C:\Windows\syso\critical\libcurl-4.dll
C:\Windows\syso\critical\libcurl.dll
C:\Windows\syso\critical\pthreadGC2.dll
C:\Windows\syso\critical\system.exe
C:\Windows\syso\critical\zlib1.dll
C:\Windows\system32\nircmd.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update: C:\Windows\syso\critical\antivirus.bat
Detected by UnHackMe:
SYSTEM.EXE
Default location: %WinDir%\SYSO\CRITICAL\SYSTEM.EXE
Dropper information:
MD5: a9e135b3f32fd24a59e603410c798d6c
File size: 593894 bytes