Solved! Use WINLOGON.EXE (Trojan Downloader) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINLOGON.EXE – Trojan Downloader removal

File MD5 Virus Alias
WINLOGON.EXE 137c67d63d5e8b982782825d5044c332 Trojan Downloader
WINLOGON.EXE 137c67d63d5e8b982782825d5044c332 Trojan Hllw
WINLOGON.EXE 137c67d63d5e8b982782825d5044c332 Worm Autorun
WINLOGON.EXE 137c67d63d5e8b982782825d5044c332 Trojan Agent

WINLOGON.EXE size: 130050 bytes
WINLOGON.EXE hash: 137C67D63D5E8B982782825D5044C332

Created files:

C:\windows\system32\~A~m~B~u~R~a~D~u~L~\csrss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\lsass.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\services.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\smss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\winlogon.exe

Detected by UnHackMe:

WINLOGON.EXE
Default location: %SYSDIR%\~A~M~B~U~R~A~D~U~L~\WINLOGON.EXE

Dropper information:
MD5: 672fb9cea8a89536c2c7708bb08adfd6
File size: 130050 bytes

Leave a Reply