WIN.EXE – Trojan SuspiciousFile

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WIN.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
WIN.EXE 0edf218d718225fe0d85cce1dd117452 Trojan SuspiciousFile
WIN.EXE 0edf218d718225fe0d85cce1dd117452 Trojan Dropper.Generic7
WIN.EXE 0edf218d718225fe0d85cce1dd117452 Trojan Generic
WIN.EXE 0edf218d718225fe0d85cce1dd117452 Trojan Downloader
WIN.EXE 0edf218d718225fe0d85cce1dd117452 Trojan Agent

WIN.EXE size: 841580 bytes
WIN.EXE hash: 0EDF218D718225FE0D85CCE1DD117452

Created files:

%AppData%\InstallDir\win.exe
%UserProfile%\My Documents\MSDCSC\msdcsc.exe
%UserProfile%\Start Menu\Programs\Startup\system.pif
%Common Startmenu%\Programs\Startup\system.pif

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\help: %WinDir%\System32\config\Systemprofile\Application Data\InstallDir\win.exe??|’]?|@?

Detected by UnHackMe:

WIN.EXE
Default location: %APPDATA%\INSTALLDIR\WIN.EXE

Dropper information:
MD5: 0edf218d718225fe0d85cce1dd117452
File size: 841580 bytes

Leave a Reply