Trojan Barys – winlogon.exe – 0ac8766013a1dbcaea8deb11c315eb8b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Barys
Also known as: Trojan Generic, Worm Autorun
SHA256: bc7f292966510c411fe6651f8756020fe2dd3e77203cf8e39c079c632f0bc59f
SHA1: e47b8ad12321604ee6f09a123bd843bfbfaf100c
MD5: 0ac8766013a1dbcaea8deb11c315eb8b
File size: 1304752 bytes

Created files:

%Common Startmenu%\Programs\Startup\winlogon.exe – Trojan Barys
%Common Startmenu%\Programs\winlogon.exe – Trojan Barys
%Common Startmenu%\winlogon.exe – Trojan Barys
%UserProfile%\25543555\winlogon.exe – Trojan Barys
%Startup%\winlogon.exe – Trojan Barys
%Startmenu%\Programs\winlogon.exe – Trojan Barys
%Startmenu%\winlogon.exe – Trojan Barys

Trojan Barys created autostart registry keys:

HKLM\System\CurrentControlSet\Services\wscsvc\Start: 04000000

Leave a Reply