winsvrcore.exe – Trojan Banload

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

winsvrcore.exe – Trojan Banload removal

FileVirus Alias
winsvrcore.exe Trojan Banload
winsvrcore.exe Trojan Delf
winsvrcore.exe Trojan Generic
winsvrcore.exe Trojan Downloader.Generic

Created files:

%Program Files%\winsvrcore\winsvrcore.exe – Trojan Banload
%Program Files%\winsvrcore\__tmp_rar_sfx_access_check_1434843 – Trojan Banload

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WINDOWS??????: %Program Files%\winsvrcore\winsvrcore.exe

Detected by UnHackMe:

winsvrcore.exe
Default location: %Program Files%\winsvrcore\winsvrcore.exe

Dropper information:
SHA256: e46d2d8144aa76f7220ad9304bb7ed332c982905c84eb4e65a39dc38bc7adb48
SHA1: f2c3b4fd75f8df90995e8f29b3d12fd531e0c943
MD5: 805336f522845a87a6d31561b677a73d
File size: 283851 bytes

Leave a Reply