I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
WIN.EXE – Worm Autorun removal
File | MD5 | Virus Alias |
---|---|---|
WIN.EXE | 38d0e7eeeaf903c21aba0bcee9ffa8e0 | Worm Autorun |
WIN.EXE | 38d0e7eeeaf903c21aba0bcee9ffa8e0 | Trojan Generic |
WIN.EXE | 38d0e7eeeaf903c21aba0bcee9ffa8e0 | Trojan Hllw |
WIN.EXE | 38d0e7eeeaf903c21aba0bcee9ffa8e0 | Trojan Eldorado |
WIN.EXE | 38d0e7eeeaf903c21aba0bcee9ffa8e0 | Worm Brontok |
WIN.EXE size: 77824 bytes
WIN.EXE hash: 38D0E7EEEAF903C21ABA0BCEE9FFA8E0
Created files:
%WinDir%\dc.exe
%WinDir%\Help\Other.exe
%WinDir%\inf\Other.exe
%WinDir%\SVIQ.EXE
%WinDir%\system\Fun.exe
%SysDir%\config\Win.exe
%SysDir%\WinSit.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe %WinDir%\System32\WinSit.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dc2k5: %WinDir%\SVIQ.EXE
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\load: %WinDir%\inf\Other.exe
Detected by UnHackMe:
WIN.EXE
Default location: %SYSDIR%\CONFIG\WIN.EXE
Dropper information:
MD5: 38d0e7eeeaf903c21aba0bcee9ffa8e0
File size: 77824 bytes