I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Worm AMN
Also known as: Trojan Agent
SHA256: df2f60021cfc70bea0e3fca039876d7b2db36f760abe59e97610c5cec8f2cc90
SHA1: 215b656a7f7b3de808c070da3222e8c0d6b9c2f9
MD5: 1b17d36f619ed62ca431d8eb876b6db2
File size: 735336 bytes
Created files:
%Program Files%\SelectRebates\SelectRebates.exe – Worm AMN
%Program Files%\SelectRebates\SelectRebatesApi.exe – Worm AMN
%Program Files%\SelectRebates\SelectRebatesDownload.exe – Worm AMN
%Program Files%\SelectRebates\SelectRebatesUninstall.exe – Worm AMN
%Program Files%\SelectRebates\SRebates.dll – Worm AMN
%Program Files%\SelectRebates\SRFF3.dll – Worm AMN
%Temp%\LIG8NNU6.exe – Worm AMN
%Temp%\SahToolbar\ShopAtHomeToolbar_.dll – Worm AMN
%Temp%\SelectRebatesApi_.exe – Worm AMN
%Temp%\SelectRebatesUninstall_.exe – Worm AMN
%Temp%\SelectRebatesUpdater.exe – Worm AMN
%Temp%\SelectRebates_.exe – Worm AMN
%Temp%\ShopAtHome_Toolbar_Installer.exe – Worm AMN
%Temp%\SRebates_.dll – Worm AMN
%Temp%\SRFF3_.dll – Worm AMN
Worm AMN created autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SelectRebates: %Program Files%\SelectRebates\SelectRebates.exe