REGSVR.EXE – Worm Autoit

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

REGSVR.EXE – Worm Autoit removal

FileMD5Virus Alias
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Worm Autoit
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Suspicious File
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Trojan Generic
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Trojan Click
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Trojan Downloader
REGSVR.EXE 0d547ea1dd0251ffbc3e6ce5dbf477a1 Worm Sohanat

REGSVR.EXE size: 617473 bytes
REGSVR.EXE hash: 0D547EA1DD0251FFBC3E6CE5DBF477A1

Created files:

%WinDir%\regsvr.exe
%SysDir%\regsvr.exe
%SysDir%\svchost .exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe regsvr.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Msn Messsenger: %WinDir%\System32\regsvr.exe

Detected by UnHackMe:

REGSVR.EXE
Default location: %WinDir%\REGSVR.EXE

Dropper information:
MD5: 0d547ea1dd0251ffbc3e6ce5dbf477a1
File size: 617473 bytes

Leave a Reply