I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
XEPPYDN.EXE – Worm Autorun removal
File | MD5 | Virus Alias |
---|---|---|
XEPPYDN.EXE | 9b00625e79260a02500018bd6097228c | Worm Autorun |
XEPPYDN.EXE | 9b00625e79260a02500018bd6097228c | Trojan Malware.Obscu |
XEPPYDN.EXE | 9b00625e79260a02500018bd6097228c | Trojan Vilsel |
XEPPYDN.EXE | 9b00625e79260a02500018bd6097228c | Trojan Renos |
XEPPYDN.EXE | 9b00625e79260a02500018bd6097228c | Trojan Agent |
XEPPYDN.EXE size: 1269760 bytes
XEPPYDN.EXE hash: 9B00625E79260A02500018BD6097228C
Created files:
%TEMP%\xeppydn.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\mughrxip: zuthexvppfhbishcbpmfd.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\zenls: %TEMP%\zuthexvppfhbishcbpmfd.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: mealfvqherqhlsewsd.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\oaqvjtitkrkv: %TEMP%\wmgphvodyjgvxcmc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: kecpldatshibhqeywjfx.exe .
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\rcrvirfpfld: %TEMP%\kecpldatshibhqeywjfx.exe .
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dmzbmtfnb: dupzshbrnzxnqwhyt.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\kqazhl: %TEMP%\zuthexvppfhbishcbpmfd.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\wguxjrench: dupzshbrnzxnqwhyt.exe .
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\xeppydn: %TEMP%\wmgphvodyjgvxcmc.exe .
Detected by UnHackMe:
XEPPYDN.EXE
Default location: %TEMP%\XEPPYDN.EXE
Dropper information:
MD5: 203d3bc9a068d5b548d3e953b1fa8990
File size: 696320 bytes