Worm Ainslot – Windows Defender.exe – 86e06c1aed0a4be1f916e5d700a50a7b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Worm Ainslot
Also known as: Trojan Agent, Virus Vbcrypt
SHA256: 05578c60e83e3515aa3070893c55ab27d37d8317fefa68b756b5de31b5487831
SHA1: c27d2c3da0e67f88f11822b74fad0f0ef97e6727
MD5: 86e06c1aed0a4be1f916e5d700a50a7b
File size: 166400 bytes

Created files:

%AppData%\Windows Defender\Windows Defender.exe – Worm Ainslot

Worm Ainslot created autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{D0EFFCD0-4BDB-B04B-D040-BCBE581462CC}\StubPath: %AppData%\Windows Defender\Windows Defender.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\Windows Defender: %AppData%\Windows Defender\Windows Defender.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: %AppData%\Windows Defender\Windows Defender.exe
HKCU\Software\Microsoft\Active Setup\Installed Components\{D0EFFCD0-4BDB-B04B-D040-BCBE581462CC}\StubPath: %AppData%\Windows Defender\Windows Defender.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: %AppData%\Windows Defender\Windows Defender.exe

Leave a Reply