Trojan StartPage – RkRealTech.exe – 020e99472e9adf7c312f3e27e9f8290a

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan StartPage
Also known as: Trojan Delf, Trojan Eldorado
SHA256: 8aacb41618149153b01fa86fd9a3ec749c5fa3f2c2b8936b71e215401a30f9a9
SHA1: 4dc32dbedea4d71c3c13ed2214d69aa83649be5d
MD5: 020e99472e9adf7c312f3e27e9f8290a
File size: 264205 bytes

Created files:

%WinDir%\RkRealTech.exe – Trojan StartPage
%WinDir%\RtkSYUdp.exe – Trojan StartPage
%Local AppData%\Google\Chrome\Application\chrome x64.exe – Trojan StartPage
%Temp%\$$dmsf.bat – Trojan StartPage
%Temp%\$$edbs.bat – Trojan StartPage
%Temp%\$$RAVSING.bat – Trojan StartPage
%Temp%\$$rcqi.bat – Trojan StartPage

Trojan StartPage created autostart registry keys:

HKLM\System\CurrentControlSet\Services\cryptsvc\SBIE_StartTicks: 28CF2400

Leave a Reply