I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
EXPOR.EXE – Worm Viking removal
| File | MD5 | Virus Alias |
|---|---|---|
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Worm Viking |
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Trojan SuspiciousFile |
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Trojan Generic |
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Trojan Hllw |
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Trojan Eldorado |
| EXPOR.EXE | 1943ae5e26177f89ccb451024d75732a | Trojan Downloader |
EXPOR.EXE size: 26112 bytes
EXPOR.EXE hash: 1943AE5E26177F89CCB451024D75732A
Created files:
%TEMP%\Expor.exe
%TEMP%\NtHid.sys
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\bits\Start: 03000000
HKLM\System\CurrentControlSet\Services\NtHid\Type: 01000000
HKLM\System\CurrentControlSet\Services\NtHid\Start: 03000000
HKLM\System\CurrentControlSet\Services\NtHid\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\NtHid\DisplayName: NtHid
HKLM\System\CurrentControlSet\Services\NtHid\ImagePath: %TEMP%\NtHid.sys
Detected by UnHackMe:
EXPOR.EXE
Default location: %TEMP%\EXPOR.EXE
Dropper information:
MD5: 816fdd3dbba8041d024aa98652bf72ab
File size: 1287130 bytes