Solved! Use MSIMN.EXE.EXE (Worm Autorun) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSIMN.EXE.EXE – Worm Autorun removal

File MD5 Virus Alias
MSIMN.EXE.EXE 5b7403932bd9526b14fed2884772c273 Worm Autorun
MSIMN.EXE.EXE 5b7403932bd9526b14fed2884772c273 Trojan Generic
MSIMN.EXE.EXE 5b7403932bd9526b14fed2884772c273 Trojan Agent
MSIMN.EXE.EXE 5b7403932bd9526b14fed2884772c273 Trojan Delf
MSIMN.EXE.EXE 5b7403932bd9526b14fed2884772c273 Trojan Crypt

MSIMN.EXE.EXE size: 1291360 bytes
MSIMN.EXE.EXE hash: 5B7403932BD9526B14FED2884772C273

Created files:

%Program Files%\Internet Explorer\iexplore.exe.exe
%Program Files%\Outlook Express\msimn.exe.exe
%SysDir%\HelpMe.exe
%SysDir%\notepad.exe.exe
%Temp%\MZ?

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe HelpMe.exe

Detected by UnHackMe:

MSIMN.EXE.EXE
Default location: %PROGRAM FILES%\OUTLOOK EXPRESS\MSIMN.EXE.EXE

Dropper information:
MD5: 00989d9eeb76ef7a508305fdb9a8d436
File size: 1230408 bytes

Leave a Reply