Solved! Use VMWARE-VMX.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

VMWARE-VMX.EXE – Trojan Artemis removal

FileMD5Virus Alias
VMWARE-VMX.EXE 13fd80ef56e0043358fcf2eeeabb36a8 Trojan Artemis
VMWARE-VMX.EXE 13fd80ef56e0043358fcf2eeeabb36a8 Trojan UnwantedProgram
VMWARE-VMX.EXE 13fd80ef56e0043358fcf2eeeabb36a8 Trojan Generic
VMWARE-VMX.EXE 13fd80ef56e0043358fcf2eeeabb36a8 Backdoor RBot
VMWARE-VMX.EXE 13fd80ef56e0043358fcf2eeeabb36a8 Trojan Agent

VMWARE-VMX.EXE size: 57344 bytes
VMWARE-VMX.EXE hash: 13FD80EF56E0043358FCF2EEEABB36A8

Created files:

%SysDir%\vmware-vmx.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Windows Dfsr My Teast 3.0\Type: 10000000
HKLM\System\CurrentControlSet\Services\Windows Dfsr My Teast 3.0\Start: 02000000
HKLM\System\CurrentControlSet\Services\Windows Dfsr My Teast 3.0\DisplayName: Windows Dfsas Tesst 3.0
HKLM\System\CurrentControlSet\Services\Windows Dfsr My Teast 3.0\ImagePath: %WinDir%\System32\vmware-vmx.exe
HKLM\System\CurrentControlSet\Services\Windows Dfsr My Teast 3.0\Description: Windows Dsas Server 3.0

Detected by UnHackMe:

VMWARE-VMX.EXE
Default location: %SYSDIR%\VMWARE-VMX.EXE

Dropper information:
MD5: 13fd80ef56e0043358fcf2eeeabb36a8
File size: 57344 bytes

Leave a Reply