WEB.EXE – Trojan StartPage

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WEB.EXE – Trojan StartPage removal

FileMD5Virus Alias
WEB.EXE 25c32f16fc416fb33ce0db91d23a2b50 Trojan StartPage
WEB.EXE 25c32f16fc416fb33ce0db91d23a2b50 Suspicious File
WEB.EXE 25c32f16fc416fb33ce0db91d23a2b50 Trojan Generic
WEB.EXE 25c32f16fc416fb33ce0db91d23a2b50 Trojan Agent

WEB.EXE size: 22016 bytes
WEB.EXE hash: 25C32F16FC416FB33CE0DB91D23A2B50

Created files:

%SysDir%\SkinH_EL.dll
%TEMP%\E_N4\krnln.fnr
%TEMP%\IXP000.TMP\web.exe
%TEMP%\IXP000.TMP\?????~1.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

WEB.EXE
Default location: %TEMP%\IXP000.TMP\WEB.EXE

Dropper information:
MD5: 03d06035f035a6cf217e8478c4acf9b4
File size: 1265152 bytes

Leave a Reply