Solved! Use IEXPLORE.EXE.EXE (Worm Autorun) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

IEXPLORE.EXE.EXE – Worm Autorun removal

File MD5 Virus Alias
IEXPLORE.EXE.EXE 77e512abbbeed1ac576d6f4d269ac2a9 Worm Autorun
IEXPLORE.EXE.EXE 77e512abbbeed1ac576d6f4d269ac2a9 Trojan Generic
IEXPLORE.EXE.EXE 77e512abbbeed1ac576d6f4d269ac2a9 Trojan Agent
IEXPLORE.EXE.EXE 77e512abbbeed1ac576d6f4d269ac2a9 Trojan Delf
IEXPLORE.EXE.EXE 77e512abbbeed1ac576d6f4d269ac2a9 Trojan Crypt

IEXPLORE.EXE.EXE size: 1869760 bytes
IEXPLORE.EXE.EXE hash: 77E512ABBBEED1AC576D6F4D269AC2A9

Created files:

%Program Files%\Internet Explorer\iexplore.exe.exe
%Program Files%\Outlook Express\msimn.exe.exe
%SysDir%\HelpMe.exe
%SysDir%\notepad.exe.exe
%Temp%\MZ?

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe HelpMe.exe

Detected by UnHackMe:

IEXPLORE.EXE.EXE
Default location: %PROGRAM FILES%\INTERNET EXPLORER\IEXPLORE.EXE.EXE

Dropper information:
MD5: 00989d9eeb76ef7a508305fdb9a8d436
File size: 1230408 bytes

Leave a Reply