GSSECUFORJOBKOREA.SYS – Unclassified Malware

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

GSSECUFORJOBKOREA.SYS – Unclassified Malware removal

GSSECUFORJOBKOREA.SYS size: 39816 bytes
GSSECUFORJOBKOREA.SYS hash: EAFE2AA928426CCA343AE56D0267FDFF

Created files:

%TEMP%\IXP000.TMP\gssecuforjobkorea.sys
%TEMP%\IXP000.TMP\gssecuforjobkorea64.sys
%TEMP%\IXP000.TMP\manualinstaller.exe
%TEMP%\IXP000.TMP\webprotectoragent.exe
%TEMP%\IXP000.TMP\webprotectoragent64.exe
%TEMP%\IXP000.TMP\webprotectorcontrolex.ocx
%TEMP%\IXP000.TMP\webprotectorhook.dll
%TEMP%\IXP000.TMP\webprotectorhook64.dll
%TEMP%\IXP000.TMP\webprotectorserver.dll
%TEMP%\IXP000.TMP\webprotectorserver64.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0: rundll32.exe %WinDir%\System32\advpack.dll,DelNodeRunDLL32 “%TEMP%\IXP000.TMP\”

Detected by UnHackMe:

GSSECUFORJOBKOREA.SYS
Default location: %TEMP%\IXP000.TMP\GSSECUFORJOBKOREA.SYS

Dropper information:
MD5: fab4fa69b3c3818c29c2dab29896d4d4
File size: 875936 bytes

Leave a Reply