HIPPOP_R.EXE – Worm Vobfus

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

HIPPOP_R.EXE – Worm Vobfus removal

File MD5 Virus Alias
HIPPOP_R.EXE bdf3ff27d2071f6d65c3858d802767b6 Worm Vobfus
HIPPOP_R.EXE bdf3ff27d2071f6d65c3858d802767b6 Trojan BadReputation
HIPPOP_R.EXE bdf3ff27d2071f6d65c3858d802767b6 Trojan Downloader
HIPPOP_R.EXE bdf3ff27d2071f6d65c3858d802767b6 Trojan Agent

HIPPOP_R.EXE size: 32768 bytes
HIPPOP_R.EXE hash: BDF3FF27D2071F6D65C3858D802767B6

Created files:

%SysDir%\Base64.dll
%AppData%\HipPop\HipPop_E.exe
%AppData%\HipPop\HipPop_R.exe
%AppData%\HipPop\HipPop_S.exe
%AppData%\HipPop\HipPop_U.exe
%AppData%\HipPop\NTVBSvc.tlb

Detected by UnHackMe:

HIPPOP_R.EXE
Default location: %APPDATA%\HIPPOP\HIPPOP_R.EXE

Dropper information:
MD5: 70b850759da2e5fd5a137e40275a1930
File size: 368063 bytes

Leave a Reply