RUNDLL32MGR.EXE – Worm AMN

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RUNDLL32MGR.EXE – Worm AMN removal

File MD5 Virus Alias
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Worm AMN
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Trojan SuspiciousFile
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Trojan Generic
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Trojan Eldorado
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Trojan Kazy
RUNDLL32MGR.EXE fe36fb1073e6f8fa14d7250501a29aaf Trojan Siggen

RUNDLL32MGR.EXE size: 108544 bytes
RUNDLL32MGR.EXE hash: FE36FB1073E6F8FA14D7250501A29AAF

Created files:

%Program Files%\shmomfjs\bnebwisg.exe
%SysDir%\config\systemprofile\Start Menu\Programs\Startup\bnebwisg.exe
%SysDir%\rundll32mgr.exe
%Common AppData%\Apple Computer\Installer Cache\Safari 5.34.52.7\SetupAdmin.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: %WinDir%\System32\userinit.exe,,%Program Files%\shmomfjs\bnebwisg.exe

Detected by UnHackMe:

RUNDLL32MGR.EXE
Default location: %SYSDIR%\RUNDLL32MGR.EXE

Dropper information:
MD5: 8d337cfaaf7107f5de6fa6da913ed6cc
File size: 281512 bytes

Leave a Reply