Trojan StartPage – b9406951a45ca8998cba75236c308437

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan StartPage
Also known as: Trojan Small, Trojan Agent
SHA256: 86cde9a246dfc8106c953c65bffa0fbaf795d453efbfb2a5e1f2dc1244ef1464
SHA1: 2cca86902a518a62dc0eb74b6b7ddf479d9ec72b
MD5: b9406951a45ca8998cba75236c308437
File size: 39880 bytes

Created files:

%SysDir%\wuclient.exe – Trojan StartPage
%SysDir%\xpsp2fw.exe – Trojan StartPage

Trojan StartPage created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\XPSP2 Firewall: %WinDir%\System32\xpsp2fw.exe
HKLM\System\CurrentControlSet\Services\wuauserv\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update Client : %WinDir%\System32\wuclient.exe

Leave a Reply