I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Trojan PAM
Also known as: Trojan Agent, Trojan Crypt
SHA256: 227fbc6e77bf5464d22f59153d5a3f3ae49b3de307da4c104914eb57fe4b66fc
SHA1: 78dc0afff915094d3e913b0d548c21733493ac5e
MD5: 8524895785f059b7d9f2aadf23178367
File size: 50688 bytes
Created files:
%SysDir%\drivers\ac97intc.sys – Trojan PAM
%SysDir%\drivers\aec.sys – Trojan PAM
%SysDir%\drivers\asyncmac.sys – Trojan PAM
%SysDir%\drivers\atmarpc.sys – Trojan PAM
%SysDir%\drivers\audstub.sys – Trojan PAM
%SysDir%\drivers\cmbatt.sys – Trojan PAM
%SysDir%\drivers\dmusic.sys – Trojan PAM
%SysDir%\drivers\drmkaud.sys – Trojan PAM
%SysDir%\drivers\hidusb.sys – Trojan PAM
%SysDir%\drivers\http.sys – Trojan PAM
%SysDir%\drivers\ip6fw.sys – Trojan PAM
%SysDir%\drivers\ipfltdrv.sys – Trojan PAM
%SysDir%\drivers\ipinip.sys – Trojan PAM
%SysDir%\drivers\ipnat.sys – Trojan PAM
%SysDir%\drivers\irenum.sys – Trojan PAM
%SysDir%\drivers\kmixer.sys – Trojan PAM
%SysDir%\drivers\mouhid.sys – Trojan PAM
%SysDir%\drivers\msgpc.sys – Trojan PAM
%SysDir%\drivers\mskssrv.sys – Trojan PAM
%SysDir%\drivers\mspclock.sys – Trojan PAM
%SysDir%\drivers\mspqm.sys – Trojan PAM
%SysDir%\drivers\mssmbios.sys – Trojan PAM
%SysDir%\drivers\ndistapi.sys – Trojan PAM
%SysDir%\drivers\ndisuio.sys – Trojan PAM
%SysDir%\drivers\ndiswan.sys – Trojan PAM
%SysDir%\drivers\nwlnkflt.sys – Trojan PAM
%SysDir%\drivers\nwlnkfwd.sys – Trojan PAM
%SysDir%\drivers\parport.sys – Trojan PAM
%SysDir%\drivers\pcntpci5.sys – Trojan PAM
%SysDir%\drivers\psched.sys – Trojan PAM
%SysDir%\drivers\ptilink.sys – Trojan PAM
%SysDir%\drivers\rasl2tp.sys – Trojan PAM
%SysDir%\drivers\raspppoe.sys – Trojan PAM
%SysDir%\drivers\raspptp.sys – Trojan PAM
%SysDir%\drivers\raspti.sys – Trojan PAM
%SysDir%\drivers\rdpdr.sys – Trojan PAM
%SysDir%\drivers\secdrv.sys – Trojan PAM
%SysDir%\drivers\splitter.sys – Trojan PAM
%SysDir%\drivers\swenum.sys – Trojan PAM
%SysDir%\drivers\swmidi.sys – Trojan PAM
%SysDir%\drivers\sysaudio.sys – Trojan PAM
%SysDir%\drivers\update.sys – Trojan PAM
%SysDir%\drivers\usbhub.sys – Trojan PAM
%SysDir%\drivers\usbohci.sys – Trojan PAM
%SysDir%\drivers\vboxmouse.sys – Trojan PAM
%SysDir%\drivers\vboxvideo.sys – Trojan PAM
%SysDir%\drivers\wanarp.sys – Trojan PAM
%SysDir%\drivers\wdmaud.sys – Trojan PAM
%SysDir%\drivers\win32x.sys – Trojan PAM
%SysDir%\win32x.exe – Trojan PAM
Trojan PAM created autostart registry keys:
HKLM\System\CurrentControlSet\Services\win32x\Type: 01000000
HKLM\System\CurrentControlSet\Services\win32x\Start: 03000000
HKLM\System\CurrentControlSet\Services\win32x\DisplayName: win32x
HKLM\System\CurrentControlSet\Services\win32x\ImagePath: %WinDir%\System32\drivers\win32x.sys