Worm Ainslot – Adobe.exe – f7a489d9f018e8ec4529a09fd0e85eb9

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Worm Ainslot
Also known as: Trojan Crypt, Trojan Agent
SHA256: 05b789edd8edf7d43abf9f5ca1528602444dc70f1bc76f5df62b8dfe59e29f33
SHA1: 9f40a05546348e26f85ff1978b416f3895ffe6b1
MD5: f7a489d9f018e8ec4529a09fd0e85eb9
File size: 408601 bytes

Created files:

%Temp%\Adobe.exe – Worm Ainslot
%Temp%\Stage1.exe – Worm Ainslot
%Temp%\Stage2.exe – Worm Ainslot

Worm Ainslot created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%Temp%\Adobe.exe,%Temp%\Adobe.exe,%Temp%\Adobe.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Adobe flash: %Temp%\Adobe.exe

Leave a Reply