WJPLAY.EXE – Virus Part

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WJPLAY.EXE – Virus Part removal

FileMD5Virus Alias
WJPLAY.EXE 877f3145023bf9a6ea2ab3913792366f Virus Part

WJPLAY.EXE size: 355472 bytes
WJPLAY.EXE hash: 877F3145023BF9A6EA2AB3913792366F

Created files:

%Program Files%\wjplay2\20140506235251\DuiLib.dll
%Program Files%\wjplay2\20140506235251\PlayerUpdate.exe
%Program Files%\wjplay2\20140506235251\Unins.exe
%Program Files%\wjplay2\20140506235251\wjplay.exe
%Program Files%\wjplay2\20140506235251\WJSpeed.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wjplay2_News_20140506235251: “%Program Files%\wjplay2\20140506235251\WJSpeed.exe” -mini
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wjplay2_20140506235251: “%Program Files%\wjplay2\20140506235251\wjplay.exe” -mini

Detected by UnHackMe:

WJPLAY.EXE
Default location: %PROGRAM FILES%\WJPLAY2\20140506235251\WJPLAY.EXE

Dropper information:
MD5: 8f8388ff0f9508a4967de0e33ad72393
File size: 1996944 bytes

Leave a Reply