ATXSETUP.EXE – Unclassified Malware

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

ATXSETUP.EXE – Unclassified Malware removal

FileMD5Virus Alias

ATXSETUP.EXE size: 53248 bytes

Created files:

%WinDir%\Downloaded Program Files\fileBrowse.ocx
%WinDir%\Downloaded Program Files\hqext.ocx
%WinDir%\Downloaded Program Files\hqform.ocx
%SysDir%\hqpub.dll
%SysDir%\organisation.dll
%SysDir%\RunScan.exe
%SysDir%\WebScan.dll
%TEMP%\RarSFX0\AtxSetup.exe
%TEMP%\RarSFX0\FileBrowse.ocx
%TEMP%\RarSFX0\hqext.ocx
%TEMP%\RarSFX0\HqForm.ocx
%TEMP%\RarSFX0\HQPub.dll
%TEMP%\RarSFX0\organisation.dll
%TEMP%\RarSFX0\RunScan.exe
%TEMP%\RarSFX0\WebScan.dll

Autostart registry keys:

HKLM\Software\Classes\CLSID\{3D1DF513-AF71-4D26-BEAE-15EA88B07398}\InprocServer32 : %WinDir%\DOWNLO~1\FILEBR~1.OCX
HKLM\Software\Classes\CLSID\{9FB6F190-E8BF-4D17-8B12-1AB5BDFE7BB0}\InprocServer32 : %WinDir%\DOWNLO~1\FILEBR~1.OCX
HKLM\Software\Classes\CLSID\{A806F6BB-473C-4EF2-B7E0-8EE15F781AC4}\InprocServer32 : %WinDir%\DOWNLO~1\hqext.ocx
HKLM\Software\Classes\CLSID\{E593373C-B16E-4F66-9D98-A82E59333622}\InprocServer32 : %WinDir%\DOWNLO~1\hqform.ocx
HKLM\Software\Classes\CLSID\{FE70C9C0-FB4D-4225-A50D-F967EC8FC54A}\InprocServer32 : %WinDir%\DOWNLO~1\hqext.ocx

Detected by UnHackMe:

ATXSETUP.EXE
Default location: %TEMP%\RARSFX0\ATXSETUP.EXE

Leave a Reply