Trojan Jorik – smss.exe – 8001ec97b8b47475bfea53afff4f95ac

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Jorik
Also known as: Trojan Kryptik, Trojan Generic
SHA256: a8396ab3ef1edfc7e5cda85a1f73e0708c99887166fbdb21d490c016b5125f33
SHA1: ddb3db8df683f393f0ce8574efbcae2068c5844e
MD5: 8001ec97b8b47475bfea53afff4f95ac
File size: 82944 bytes

Created files:

C:\windows\smss.exe – Trojan Jorik
C:\windows\temp\1234.exe – Trojan Jorik

Trojan Jorik created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows System Controler: c:\windows\smss.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\Windows System Controler: c:\windows\smss.exe
HKLM\System\CurrentControlSet\Services\wuauserv\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows System Controler: c:\windows\smss.exe

Leave a Reply