Trojan StartPage – wuclient.exe – f6a79dc50e3475aa96afcff2ddce8a1a

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan StartPage
Also known as: Trojan Small, Trojan Agent
SHA256: 58a73569bec5bfe8b52f6d44fbdcf1f5ad8d8353921ad766b15a5f05775ca5f1
SHA1: f43b1e645d60b4ee1a47627d86f910f98bd496e0
MD5: f6a79dc50e3475aa96afcff2ddce8a1a
File size: 66842 bytes

Created files:

%SysDir%\wuclient.exe – Trojan StartPage
%SysDir%\xpsp2fw.exe – Trojan StartPage

Trojan StartPage created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\XPSP2 Firewall: %WinDir%\System32\xpsp2fw.exe
HKLM\System\CurrentControlSet\Services\wuauserv\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update Client : %WinDir%\System32\wuclient.exe

Leave a Reply