wmpnscfg.exe – Trojan Crypt

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

wmpnscfg.exe – Trojan Crypt removal

FileVirus Alias
wmpnscfg.exe Trojan Crypt
wmpnscfg.exe Trojan DNAScan

Created files:

%Program Files%\Internet Explorer\Connection Wizard\spoolsv.exe – Trojan Crypt
%WinDir%\wmpnscfg.exe – Trojan Crypt

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SonyAgent: %Program Files%\Internet Explorer\Connection Wizard\spoolsv.exe

Detected by UnHackMe:

wmpnscfg.exe
Default location: %WinDir%\wmpnscfg.exe

Dropper information:
SHA256: f17fc401058e148f8046fbd54f3596fb709513dda7e7ed4297ad4ff704236ce2
SHA1: 8bd64f4b977977641e4d571c89f9718759b5bd86
MD5: 928d10aa886e78d2775965c791407202
File size: 901120 bytes

Leave a Reply