Solved! Use XECUREPKCS12_E.DLL (Unclassified Malware) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

XECUREPKCS12_E.DLL – Unclassified Malware removal

XECUREPKCS12_E.DLL size: 49152 bytes
XECUREPKCS12_E.DLL hash: 77AF18EFB46E027E88E269B639D27D61

Created files:

%Program Files%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert.der
%Program Files%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert.der
%Program Files%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert.der
%Program Files%\SoftForum\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\cert.der
%Program Files%\SoftForum\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert.der
%Program Files%\SoftForum\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert_2764.der
%Program Files%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert.der
%Program Files%\SoftForum\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert.der
%Program Files%\SoftForum\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert_275f.der
%Program Files%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert.der
%Program Files%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert.der
%Program Files%\SoftForum\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\cert.der
%Program Files%\SoftForum\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert.der
%Program Files%\SoftForum\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert_2760.der
%Program Files%\SoftForum\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert.der
%Program Files%\SoftForum\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert_2762.der
%Program Files%\SoftForum\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\cert.der
%Program Files%\SoftForum\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\cert.der
%Program Files%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert.der
%Program Files%\SoftForum\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert.der
%Program Files%\SoftForum\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert_275e.der
%Program Files%\SoftForum\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert.der
%Program Files%\SoftForum\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert_2761.der
%Program Files%\SoftForum\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\cert.der
%Program Files%\SoftForum\CertStorage\ca\e20c353aa935a1af4744c34dcadaa2e26553328a\cert.der
%Program Files%\SoftForum\CertStorage\ca\eb7058427c8a55eda4e42727d005739a0c79e751\cert.der
%Program Files%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert.der
%Program Files%\SoftForum\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\cert.der
%Program Files%\SoftForum\CertStorage\root\04ce1b50661876ad8ecea388911f2544484c8cb8\cert.der
%Program Files%\SoftForum\CertStorage\root\0520663fbd7398021d5e35ec0011007e663266c7\cert.der
%Program Files%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert.der
%Program Files%\SoftForum\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\cert.der
%Program Files%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert.der
%Program Files%\SoftForum\CertStorage\root\439ce72b9783f38d85d7a69b2ac80acb96874c6d\cert.der
%Program Files%\SoftForum\CertStorage\root\4714479f8b12842d59d847043d65b178c9ade6d0\cert.der
%Program Files%\SoftForum\CertStorage\root\4b5721483774d00e4412624b0b095ae02f2f2512\cert.der
%Program Files%\SoftForum\CertStorage\root\4bc2e06f62b2b7ce76a26c2984b8b5f7c6e8fef9\cert.der
%Program Files%\SoftForum\CertStorage\root\5cfb2e8013279d3854e1d2de79f8c6140e36d65b\cert.der
%Program Files%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert.der
%Program Files%\SoftForum\CertStorage\root\682793107b92bb0ce34a292b1f70074e6734fc54\cert.der
%Program Files%\SoftForum\CertStorage\root\6b4fb7586e0634486d12e03c21867008f068a711\cert.der
%Program Files%\SoftForum\CertStorage\root\aa4fac81a27492b4b107b29922e5b21be101c9a5\cert.der
%Program Files%\SoftForum\CertStorage\root\bda648082b3b561764d70404f0d4e3e96f337985\cert.der
%Program Files%\SoftForum\CertStorage\root\dc228a9a2bd0556993e605cb222c8ccaed43433e\cert.der
%Program Files%\SoftForum\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\cert.der
%Program Files%\SoftForum\CertStorage\root\ec95d2752df624a0b143494ec5dc1b8ba723eacb\cert.der
%Program Files%\SoftForum\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert.der
%Program Files%\SoftForum\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert_04.der
%Program Files%\SoftForum\CertStorage\root\fe8392b5db83b8e92d63d31992eba0d18e6f25d0\cert.der
%Program Files%\SoftForum\XecureExpress II\MailViewer.dll
%Program Files%\SoftForum\XecureExpress II\MiraePKIX_E.dll
%Program Files%\SoftForum\XecureExpress II\msvcp60.dll
%Program Files%\SoftForum\XecureExpress II\npXEplugin.dll
%Program Files%\SoftForum\XecureExpress II\nsldap32v50.dll
%Program Files%\SoftForum\XecureExpress II\XecureASN_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureCodec_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureCRL_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureCrypto_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureCSP_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureCTL_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureIO_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureLDAP_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureOCSP_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePKCS12_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePKCS5_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePKCS7_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePKCS8_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePKC_E.dll
%Program Files%\SoftForum\XecureExpress II\XecurePVD_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureST_E.dll
%Program Files%\SoftForum\XecureExpress II\XecureTSP_E.dll
%Program Files%\SoftForum\XecureExpress II\XEISetup2.exe
%Program Files%\SoftForum\XecureExpress II\XEIViewer2.dll
%Program Files%\SoftForum\XecureExpress II\XEVGUI.dll
%Program Files%\SoftForum\XecureExpress II\XEVSmime.dll
%Program Files%\SoftForum\XecureExpress II\XWebCertMng_E.dll
%Program Files%\SoftForum\XecureExpress II\XWebCS_E.dll
%Program Files%\SoftForum\XecureExpress II\XWebSSL_E.dll
%Program Files%\SoftForum\XecureExpress II\XWebUI_E.dll
%Program Files%\SoftForum\XecureExpress II\XWebUtil_E.dll
%Program Files%\SoftForum\XecureExpress II\XWSmartCard_E.dll
%Program Files%\SoftForum\XecureExpress II\xwUACWrapper_E.dll
%Temp%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert_2764.der
%Temp%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert_275f.der
%Temp%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert_2760.der
%Temp%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert_2762.der
%Temp%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert_275e.der
%Temp%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert_2761.der
%Temp%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\e20c353aa935a1af4744c34dcadaa2e26553328a\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\eb7058427c8a55eda4e42727d005739a0c79e751\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert.der
%Temp%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\04ce1b50661876ad8ecea388911f2544484c8cb8\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\0520663fbd7398021d5e35ec0011007e663266c7\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\439ce72b9783f38d85d7a69b2ac80acb96874c6d\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\4714479f8b12842d59d847043d65b178c9ade6d0\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\4b5721483774d00e4412624b0b095ae02f2f2512\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\4bc2e06f62b2b7ce76a26c2984b8b5f7c6e8fef9\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\5cfb2e8013279d3854e1d2de79f8c6140e36d65b\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\682793107b92bb0ce34a292b1f70074e6734fc54\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\6b4fb7586e0634486d12e03c21867008f068a711\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\aa4fac81a27492b4b107b29922e5b21be101c9a5\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\bda648082b3b561764d70404f0d4e3e96f337985\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\dc228a9a2bd0556993e605cb222c8ccaed43433e\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\ec95d2752df624a0b143494ec5dc1b8ba723eacb\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert.der
%Temp%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert_04.der
%Temp%\WZSE0.TMP\CertStorage\root\fe8392b5db83b8e92d63d31992eba0d18e6f25d0\cert.der
%Temp%\WZSE0.TMP\MailViewer.dll
%Temp%\WZSE0.TMP\MiraePKIX_E.dll
%Temp%\WZSE0.TMP\msvcp60.dll
%Temp%\WZSE0.TMP\npXEplugin.dll
%Temp%\WZSE0.TMP\nsldap32v50.dll
%Temp%\WZSE0.TMP\XecureASN_E.dll
%Temp%\WZSE0.TMP\XecureCodec_E.dll
%Temp%\WZSE0.TMP\XecureCRL_E.dll
%Temp%\WZSE0.TMP\XecureCrypto_E.dll
%Temp%\WZSE0.TMP\XecureCSP_E.dll
%Temp%\WZSE0.TMP\XecureCTL_E.dll
%Temp%\WZSE0.TMP\XecureIO_E.dll
%Temp%\WZSE0.TMP\XecureLDAP_E.dll
%Temp%\WZSE0.TMP\XecureOCSP_E.dll
%Temp%\WZSE0.TMP\XecurePKCS12_E.dll
%Temp%\WZSE0.TMP\XecurePKCS5_E.dll
%Temp%\WZSE0.TMP\XecurePKCS7_E.dll
%Temp%\WZSE0.TMP\XecurePKCS8_E.dll
%Temp%\WZSE0.TMP\XecurePKC_E.dll
%Temp%\WZSE0.TMP\XecurePVD_E.dll
%Temp%\WZSE0.TMP\XecureST_E.dll
%Temp%\WZSE0.TMP\XecureTSP_E.dll
%Temp%\WZSE0.TMP\XEISetup2.exe
%Temp%\WZSE0.TMP\XEIViewer2.dll
%Temp%\WZSE0.TMP\XEVGUI.dll
%Temp%\WZSE0.TMP\XEVSmime.dll
%Temp%\WZSE0.TMP\XWebCertMng_E.dll
%Temp%\WZSE0.TMP\XWebCS_E.dll
%Temp%\WZSE0.TMP\XWebSSL_E.dll
%Temp%\WZSE0.TMP\XWebUI_E.dll
%Temp%\WZSE0.TMP\XWebUtil_E.dll
%Temp%\WZSE0.TMP\XWSmartCard_E.dll
%Temp%\WZSE0.TMP\xwUACWrapper_E.dll

Detected by UnHackMe:

XECUREPKCS12_E.DLL
Default location: %PROGRAM FILES%\SOFTFORUM\XECUREEXPRESS II\XECUREPKCS12_E.DLL

Dropper information:
MD5: c52c29feec89c2524ff70653e1711c66
File size: 1979728 bytes

Leave a Reply