Worm Autoit – aec931e484f13e7a89fc9f9d24242546

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Worm Autoit
Also known as: Trojan Agent, Trojan Small
SHA256: ab4ed541cf56d01bd03e04976315c1974490a5cb4a65c9f9ac74b12399ee270a
SHA1: 1dcb90ab77f5dd94b8607f7000aba954d66cbb90
MD5: aec931e484f13e7a89fc9f9d24242546
File size: 2774384 bytes

Created files:

%WinDir%\IEXPLOREi.exe – Worm Autoit
%SysDir%\autorun.ini – Worm Autoit
%SysDir%\IEXPLOREi.exe – Worm Autoit
%SysDir%\Serverx.exe – Worm Autoit
%SysDir%\WORD.exe – Worm Autoit

Worm Autoit created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe IEXPLOREi.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Serverx: %WinDir%\System32\Serverx.exe^??? ???Processd??x????$}#??S? |?x???$}?x??D??S?S(p
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Yahoo Messengger: %WinDir%\System32\IEXPLOREi.exe

Leave a Reply