WINDOWSSERVICE.EXE – Trojan Click

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINDOWSSERVICE.EXE – Trojan Click removal

FileMD5Virus Alias
WINDOWSSERVICE.EXE b1da095783e090b8db42581f930b1685 Trojan Click
WINDOWSSERVICE.EXE b1da095783e090b8db42581f930b1685 Trojan WS.Reputation
WINDOWSSERVICE.EXE b1da095783e090b8db42581f930b1685 Trojan Agent

WINDOWSSERVICE.EXE size: 7168 bytes
WINDOWSSERVICE.EXE hash: B1DA095783E090B8DB42581F930B1685

Created files:

%Program Files%\K14R\mysetup.exe
%Program Files%\K14R\uvname.conf
%Program Files%\K14R\WindowsService.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ReputationAlertUpdaterService\Type: 10000000
HKLM\System\CurrentControlSet\Services\ReputationAlertUpdaterService\Start: 02000000
HKLM\System\CurrentControlSet\Services\ReputationAlertUpdaterService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ReputationAlertUpdaterService\ImagePath: %Program Files%\K14R\WindowsService.exe

Detected by UnHackMe:

WINDOWSSERVICE.EXE
Default location: %PROGRAM FILES%\K14R\WINDOWSSERVICE.EXE

Dropper information:
MD5: 7453d6d08887f57210a79b6ed41b88db
File size: 45201 bytes

Leave a Reply