Audiofix.exe – Worm Ainslot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Audiofix.exe – Worm Ainslot removal

FileVirus Alias
Audiofix.exe Worm Ainslot
Audiofix.exe Trojan Siggen
Audiofix.exe Trojan FakeAV

Created files:

%AppData%\Microsoft\Audiofix.exe – Worm Ainslot

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{ECBA9C8B-F4E6-AFBF-DCDE-E2DDAD3F2BAC}\StubPath: %AppData%\Microsoft\Audiofix.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\Audio Install: %AppData%\Microsoft\Audiofix.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Audio Install: %AppData%\Microsoft\Audiofix.exe
HKCU\Software\Microsoft\Active Setup\Installed Components\{ECBA9C8B-F4E6-AFBF-DCDE-E2DDAD3F2BAC}\StubPath: %AppData%\Microsoft\Audiofix.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Audio Install: %AppData%\Microsoft\Audiofix.exe

Detected by UnHackMe:

Audiofix.exe
Default location: %AppData%\Microsoft\Audiofix.exe

Dropper information:
SHA256: 7b8bf9f0f08ceacf205269282e82cc4307d3f2f66db9e8512e599c92989d45b1
SHA1: be552ef07c635d26b26134b7f4ed13e4113ca428
MD5: a9f39f40eb323d275825b4e8cec2b3a2
File size: 233984 bytes

Leave a Reply