Solved! Use TWEXT.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TWEXT.EXE – Trojan Crypt removal

FileMD5Virus Alias
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Trojan Crypt
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Trojan Eldorado
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Trojan Binder
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Trojan Agent
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Trojan ZBot
TWEXT.EXE a063ce8a24b353aa70b2dd83495d9db2 Virus Vbcrypt

TWEXT.EXE size: 570399 bytes
TWEXT.EXE hash: A063CE8A24B353AA70B2DD83495D9DB2

Created files:

%SysDir%\twext.exe
%Temp%\6tyD.exe

Autostart registry keys:

HKLM\Software\Microsoft\windows nt\currentversion\winlogon\userinit: %WinDir%\System32\userinit.exe,%WinDir%\System32\twext.exe,

Detected by UnHackMe:

TWEXT.EXE
Default location: %SYSDIR%\TWEXT.EXE

Dropper information:
MD5: 38b63ed5eeb382a7f5346fa6850a011b
File size: 100796 bytes

Leave a Reply