I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
WTLBASS32.DLL – Trojan StartPage removal
| File | MD5 | Virus Alias |
|---|---|---|
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan StartPage |
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan Artemis |
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan Eldorado |
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan Downloader |
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan Small |
| WTLBASS32.DLL | f0eb9915451b022473e691fa71b70411 | Trojan Banload |
WTLBASS32.DLL size: 29184 bytes
WTLBASS32.DLL hash: F0EB9915451B022473E691FA71B70411
Created files:
%SysDir%\CSRSSW.EXE
%SysDir%\CTFMONSS.EXE
%WinDir%\wtlbass32.dll
Autostart registry keys:
HKLM\Software\Classes\CLSID\{A0ED918D-B8E6-4c3d-BD15-1DB1AE9A5DD3}\InprocServer32 : %WinDir%\wtlbass32.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\CTFMONSS: %WinDir%\System32\CTFMONSS.EXE
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\CSRSSW: %WinDir%\System32\CSRSSW.EXE
Detected by UnHackMe:
WTLBASS32.DLL
Default location: %WinDir%\WTLBASS32.DLL
Dropper information:
MD5: 5e95e38dbc16361b9166140db8e64ee8
File size: 29696 bytes