Worm Ainslot – T0NOLRQ1DJ.exe – 454490a66982a9273ce8e404004e241f

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Worm Ainslot
Also known as: Trojan Jorik, Trojan Kryptik
SHA256: 4bce9d47dc8aff743310b5a8c047998b91e46b096ccdb732fa396c01b061af85
SHA1: 833de72fe3c6365917247f0933d71ee79b437fbc
MD5: 454490a66982a9273ce8e404004e241f
File size: 344008 bytes

Created files:

%AppData%\T0NOLRQ1DJ.exe – Worm Ainslot

Worm Ainslot created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{B731FFEE-1EB6-4DAD-D2D5-EEAA2F6BFFCF}\StubPath: %AppData%\T0NOLRQ1DJ.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\Windows Defender: %AppData%\T0NOLRQ1DJ.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: %AppData%\T0NOLRQ1DJ.exe
HKCU\Software\Microsoft\Active Setup\Installed Components\{B731FFEE-1EB6-4DAD-D2D5-EEAA2F6BFFCF}\StubPath: %AppData%\T0NOLRQ1DJ.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: %AppData%\T0NOLRQ1DJ.exe

Leave a Reply