Trojan-Ransom Winlock – sdra64.exe – ffea17884ee78fa598dae77b9a4383ec

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan-Ransom Winlock
Also known as: Trojan Generic, Trojan Jorik
SHA256: 8fed07c1a866562a49dcb9a74eafc2976524e2d4cfb2d6183481994880936fe7
SHA1: e108617b55e03e130f8326f718f0fa62fc385581
MD5: ffea17884ee78fa598dae77b9a4383ec
File size: 113007 bytes

Created files:

%SysDir%\sdra64.exe – Trojan-Ransom Winlock

Trojan-Ransom Winlock created autostart registry keys:

HKLM\Software\Microsoft\windows nt\currentversion\winlogon\userinit: %WinDir%\System32\userinit.exe,%WinDir%\System32\sdra64.exe,

Leave a Reply