WINDOWS.EXE – Trojan Banker

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINDOWS.EXE – Trojan Banker removal

FileMD5Virus Alias
WINDOWS.EXE 1791bf1398ffb7470ab0c4dbfa52c6f4 Trojan Banker
WINDOWS.EXE 1791bf1398ffb7470ab0c4dbfa52c6f4 Trojan Bancos

WINDOWS.EXE size: 795648 bytes
WINDOWS.EXE hash: 1791BF1398FFB7470AB0C4DBFA52C6F4

Created files:

%SysDir%\windows.exe
%AllUsersProfile%\start menu\programs\startup\windows.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\windows: %WinDir%\System32\windows.exe

Detected by UnHackMe:

WINDOWS.EXE
Default location: %SYSDIR%\WINDOWS.EXE

Dropper information:
MD5: 1791bf1398ffb7470ab0c4dbfa52c6f4
File size: 795648 bytes

Leave a Reply