I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Trojan-Ransom Gimemo
Also known as: Trojan Kryptik, Fake Antivirus Winwebsec
SHA256: 7057c70bac02b718638aa7e29d0475d32669e9fee79b2148b4090f08bf2c00a2
SHA1: dbcb818cea1cc7ca85f3f877728e922217dc5f3f
MD5: c05c2118f9c90bf9e1837b37fca33ba0
File size: 613376 bytes
Created files:
%SysDir%\drivers\3a763f.sys – Trojan-Ransom Gimemo
%Local AppData%\911612f7e485cb17.exe – Trojan-Ransom Gimemo
Trojan-Ransom Gimemo created autostart registry keys:
HKLM\System\CurrentControlSet\Services\3a763f\Type: 01000000
HKLM\System\CurrentControlSet\Services\3a763f\Start: 01000000
HKLM\System\CurrentControlSet\Services\3a763f\DisplayName: 911612f7e485cb17.exe
HKLM\System\CurrentControlSet\Services\3a763f\ImagePath: %WinDir%\System32\drivers\3a763f.sys
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\911612f7e485cb17.exe: %Local AppData%\911612f7e485cb17.exe