XEPPYDN.EXE – Trojan Vilsel

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

XEPPYDN.EXE – Trojan Vilsel removal

FileMD5Virus Alias
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Trojan Vilsel
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Trojan Generic
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Trojan Eldorado
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Trojan PAM
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Trojan Renos
XEPPYDN.EXE 27f429674afd7657e01b8e5148e30485 Worm Autorun

XEPPYDN.EXE size: 327680 bytes
XEPPYDN.EXE hash: 27F429674AFD7657E01B8E5148E30485

Created files:

%TEMP%\xeppydn.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\mughrxip: mealfvqherqhlsewsd.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\zenls: %TEMP%\xqnzulhzxlldiqdwtfa.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: wmgphvodyjgvxcmc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\oaqvjtitkrkv: %TEMP%\kecpldatshibhqeywjfx.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: wmgphvodyjgvxcmc.exe .
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\rcrvirfpfld: %TEMP%\wmgphvodyjgvxcmc.exe .
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dmzbmtfnb: wmgphvodyjgvxcmc.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: %TEMP%\dupzshbrnzxnqwhyt.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\wguxjrench: mealfvqherqhlsewsd.exe .
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: %TEMP%\xqnzulhzxlldiqdwtfa.exe .

Detected by UnHackMe:

XEPPYDN.EXE
Default location: %TEMP%\XEPPYDN.EXE

Dropper information:
MD5: 27f429674afd7657e01b8e5148e30485
File size: 327680 bytes

Leave a Reply