TPLINK27[1].EXE – Trojan Eldorado

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TPLINK27[1].EXE – Trojan Eldorado removal

FileMD5Virus Alias
TPLINK27[1].EXE 7ffd1800328d4458cb9584b5d2903305 Trojan Eldorado

TPLINK27[1].EXE size: 524288 bytes

Created files:

%Temporary Internet Files%\Content.IE5\1HVEIEYW\tplink27[1].exe
%SysDir%\e0x2.dll
%SysDir%\gamehw.exe
%SysDir%\gametohw.exe
%SysDir%\Tencenthw.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\54rk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

Detected by UnHackMe:

TPLINK27[1].EXE
Default location: %TEMPORARY INTERNET FILES%\CONTENT.IE5\1HVEIEYW\TPLINK27[1].EXE

Leave a Reply