Solved! Use MSIMN.EXE.EXE (Worm Autorun) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSIMN.EXE.EXE – Worm Autorun removal

File MD5 Virus Alias
MSIMN.EXE.EXE 47c75762708f33abe53ee0720ffe0555 Worm Autorun
MSIMN.EXE.EXE 47c75762708f33abe53ee0720ffe0555 Trojan Generic
MSIMN.EXE.EXE 47c75762708f33abe53ee0720ffe0555 Trojan Agent
MSIMN.EXE.EXE 47c75762708f33abe53ee0720ffe0555 Trojan Delf

MSIMN.EXE.EXE size: 268336 bytes
MSIMN.EXE.EXE hash: 47C75762708F33ABE53EE0720FFE0555

Created files:

%Program Files%\Internet Explorer\iexplore.exe.exe
%Program Files%\Outlook Express\msimn.exe.exe
%SysDir%\HelpMe.exe
%SysDir%\notepad.exe.exe
%Temp%\MZ?

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe HelpMe.exe

Detected by UnHackMe:

MSIMN.EXE.EXE
Default location: %PROGRAM FILES%\OUTLOOK EXPRESS\MSIMN.EXE.EXE

Dropper information:
MD5: d85108f0ad31ea84f0f05dfeb035fb60
File size: 207384 bytes

Leave a Reply