Trojan.gen.2 Borttagningsguide

Hotnivå:
10/10
Betygsätt denna artikel:
Kommentarer (0)
Artikelvisningar: 31337
Kategori: Trojans

Trojan.gen.2 är ett paraply namn på annan dator infektioner som kan rikta din Windows-operativsystem. En Trojan är en hemlig bit av malware som kan använda vilseledande knep för att ange din personliga dator. Till exempel en Trojan kan gömma sig under falsk video-codec, systemuppdateringar, PDF omformarna, webbläsare plugins eller spam e-postbilagor. Hotet kan också vara stuvat med freeware och få installerat av redan befintliga dator infektioner. Sammantaget finns det ingen tvekan om att hotet kommer in datorn endast om det inte skyddas av autentiska och tillförlitlig identifiering och borttagning spionprogram. Enligt våra malware forskare, kan Trojan infektioner är mycket hemlig och ange och köra inom systemet utan din vetskap. Vi är här för att hjälpa dig att upptäcka och ta bort Trojan.gen.2 från Windowsoperativsystem.

Det har upptäckts att Trojan.gen.2 stöds av över 160 miljoner filer som kan bilda hundratals och tusentals olika dator infektioner. Till exempel kan TrojanDownloader:Win32/Agent.BQ, Vundo, Zbot Trojan, Trojan.Katusha eller Trojan.Alureon alla utnyttja de skadliga filer som är länkade till den onda Trojan.gen.2. Naturligtvis de försåtliga filer kopplade till infektionen är mycket farliga och kräver omedelbar borttagning. Om komponenterna använder slumptal bokstaven kombinationer för ett namn, är det inte svårt att hitta och ta bort dem. Ändå, i andra fall kunde vara insvepta filer, vilket innebär att de kunde stjäla namnen på autentiska komponenter eller kunde även korrupta autentiska filer för att du tror att det finns några maligna faktorer som du bör ta bort. Några av de vanligaste upptäckta insvepta element inkluderar svchost.exe, system.exe, winlogon.exe eller iexplore.exe. Dessa är de filer som du använder regelbundet och vars existens inom Aktivitetshanteraren kommer inte att ta upp några frågor.

Skadliga Trojan.gen.2 komponenter kan användas för en mängd olika processer. Vissa av dessa filer har polymorfa funktioner och fungera som rootkits gömma upptäckt och borttagning. Ändå, om du inte tar bort dessa komponenter från systemet, kunde du falla offer för extremt ond bedrägerier. De farliga filerna kunde ta bort åtkomst till Windows-verktyg (t.ex. Aktivitetshanteraren, Windows Security Center, brandvägg), lägga till eller ta bort systemprocesser, inaktivera säkerhetsuppdateringar, kringgå föråldrade säkerhetsprogram, Anslut datorn till fjärrservrar och använder det för spyware distribution. Det är inte ovanligt för trojaner samla in lösenord och användarnamn så att ränksmidare kunde kapa din internetbank, e-post, virtuella chatt konton. Allt detta kan leda till ekonomiska förluster och deltagande i brottslig verksamhet.

De flesta trojaner är osynlig; de kan dock orsaka långsammare datorns prestanda och Internet-anslutningsproblem. Du kan också upptäcka att vissa av verktyg inom systemet är ur funktion. Om du har upptäckt ändringar, oavsett hur små kan de vara, du inte bör riskerar att integriteten för ditt Windows-system eller säkerheten i din virtuella identitet. Om du har minsta tvivel – installera en autentisk spyware scanner för att undersöka datorn. SpyHunter erbjuder en fri-av-avgift-skanner som identifierar alla befintliga hot. Om någon malware upptäcks – ta bort den utan ytterligare dröjsmål innan cyberbrottslingar lyckas infiltrera fler hot. Om din dator är ren föreslår vi att du installerar äkta spionprogram upptäckt och borttagning programvara för att upprätthålla tillförlitligt skydd.

Ladda ned borttagning av Trojan.gen.2 *
*Den programvara för SpyHunter som laddas ned på denna hemsida är endast avsedd att användas som ett verktyg för att upptäcka virus. Om du vill använda funktionen för att avlägsna ditt virus, måste du köpa den fullständiga versionen av SpyHunter.

Trojan.gen.2 teknisk information för manuell borttagning:

Filer Ändrad/ Skapad på systemet:

# Filnamn Filstorlek (Bytes) Arkiv Fyrkant
1uqojanecatevih.dll182784 bytesMD5: 8a9effc288c73c50e8ccbd76f29f4f8f
2togojaze.dll50176 bytes
3kbdnet.dll30720 bytes
42d6smh6a.exe77824 bytesMD5: 0c6d458e643afe6d9cb8821f3e8e5233
5262634_3872_1508_3588.19169.tmp15360 bytesMD5: 932963b837dd832eb546dd15b5fecca3
6bawawaza.dll78848 bytes
7mshpc.dll49664 bytesMD5: c894f59c864b86176fcae55ac22b0c5b
8mcfg.exe15360 bytesMD5: 3026b2ce720126c88cb8831e002a7f42
9oderobifamaves.dll181248 bytesMD5: bcb38a3af170849ed800813980c098c5
10userinic.exe128029 bytesMD5: 037bcdae3f1e79a4416193256fcea98e
11torbjne.exe128512 bytesMD5: c1cf83cac41392b5dec8f45747234fef
12verabija.dll88064 bytes
13dsound32.dll135168 bytesMD5: 9e15d65ee0e73133be27bd872ea4bd6c
14%UserProfile%\Application Data\rhc?????????
15%ProgramFiles%\whc?????????
16asvdxl.dll79872 bytesMD5: bc2780a2a6d2c21b76c8716975c10813
17yatodimi.dll70144 bytes
185448b7f2.exe27648 bytesMD5: cee3744e4c5f165b8acd295ba5c07830
19aboheraj.dll187904 bytesMD5: f9412fbd4707eca38cb794f439af6294
20_A00F1A0D83.exe35328 bytesMD5: 61fb92645c70143002fec8760422cba4
21ibitolet.dll189952 bytesMD5: 233dc9f067988cb5a89f47f62276fc3f
22burolage.dll96768 bytesMD5: fd8affc7ff66481f02384e273ad71123
23hoyuvuki.dll50176 bytes
24Owner.exe10309 bytesMD5: 9cf7d2ffcecb3715769e6426c5679679
25purdrh.exe89600 bytesMD5: 95c4ae530527d459c6ff2d533daa844b
26809353461.exe34816 bytesMD5: 30130f64b90770105d20bbb46f1596c0
27csrss.exe26112 bytesMD5: 815bb063d77a1137e25f78d14738c763
282.tmp86016 bytesMD5: bf2631140fea33acab46bb6da052b066
29wicstd32.dll10240 bytesMD5: 319176330cb575151eccdd9f155b5d98
30pujosove.dll48640 bytes
31vlc.exe233472 bytesMD5: 1100318c440c6126c8dd576fe2dcdd3d
32WgaLogon.dll20480 bytesMD5: 17a89cc0648612d4452f0c4b3f180254
33fejolave.dll50688 bytes
34wlcstd32.dll10240 bytesMD5: 32f081876e0a9a49cadc132c80827470
35ytaeuj.exe75776 bytesMD5: 639c64c1f97175cfa775d6a6746060a9
361370e162.exe29184 bytesMD5: c6d7eb3e377885825b9460a77774df3e
37ixervhy.exe561152 bytesMD5: efc6c7208bb3245325c1a2f87ad1cfdb
381361163109.exe991232 bytesMD5: 9fcf0e8c39b00227ba76a1bdaee25480
39liser.dll24576 bytesMD5: 4af751f112ab905e7997bd65919891c1
40pidle.exe56832 bytesMD5: 933ffb175075373dd176d4fb290958f9
41kanyd.exe334336 bytesMD5: 01d2824fbd283ee17eeb4a8a330c37e5
42WMFMRNV.EXE108032 bytesMD5: 0f7851342bd02272fe349adc730ea9ee
43obaluqizevax.dll182784 bytesMD5: e18c0753f6729408f93832496a7085be
44cpuserv.dll5120 bytesMD5: 117d1ac1072af5ac25abc49e10c5a956
45035B777F.exe, BEDC10ED.exe67584 bytesMD5: 8c0bd426432c6d444ec261ab59282e66
46ijusuyanami.dll266240 bytesMD5: 39c5f01af18aa97ace2b61ff4040d4e6
47kozeyizu.dll89088 bytes
48tbcdyhdzjpa.exe159744 bytesMD5: 8cae570780c3fac5590ba6bbea2ff6ef
49kifupiza.dll50176 bytes
50qycu.exe133632 bytesMD5: 4f78005695709f8a9b48ec2598301d7d
51nevoputo.dll89600 bytes
52ree1.exe646656 bytes
53iwaludeje.dll253952 bytesMD5: 4198fa1e672c5e150b725a46c737ee9f
54driver.sys9472 bytesMD5: 2e5cd019224e9db901bcbb3612402693
55SUE_PD.sys19840 bytesMD5: c0137b5947ae3d3fc1c17ba6fdfb3dad
56mafuyiha.dll106496 bytes
57pwakdnwqmdesytpg.dll171520 bytesMD5: acd0509401759d6806d61f61b7879787
58r4gA16WQ.dll29696 bytesMD5: 4ccb30f8ac3a3780babf4f069676d7d0
59IviUdf.sys126592 bytesMD5: 492fe21332922b6b19defd0c17c70cee
60%UserProfile%\Application Data
61yamanewa.dll80384 bytes
62~tmpi.exe87040 bytesMD5: 9637325d7b6dabfb5380fa863cc76ca4
63pcpriv.exe397824 bytes
64msdriver.exe32256 bytesMD5: e080d45b226153c94350c1f9ab5a076f
65w32main2.exe263680 bytesMD5: 68c2a77f3a68555dbebed5aad2438315
66ope2314.exe 401920 bytesMD5: 64e9e281d180395b1f60872930a8d19a
67mbssm32.exe576512 bytesMD5: 2d2c56f61320a5aacd2040be7faaccce
68futewege.dll49152 bytes
69prnet.tmp182911 bytesMD5: d848251f26b45a2a5f72173d82593cb3
70winlogun.exe15000 bytesMD5: 689738a2a20480e6a8e22de5c93a3feb
71sogidona.dll89088 bytes
72wisysvi.dll67072 bytesMD5: cd5ecd06b63492fbcb6509dc20442631
73updatenf.dll43520 bytesMD5: a2bf702237a404775083a1360112c6e5
74baka6.exe144384 bytesMD5: c95ecdad9b7dabf9eb81b4cf50a1aa59
75install[1].exe111616 bytesMD5: 58b54f430f9f09313e25f4cfe1e689be
76hesudobu.dll104960 bytes
77icocalolacihir.dll182272 bytesMD5: a0f9b695b2711007dc5201a98de184f4
78lebenesa.dll78848 bytes
79WinPatrol.exe172032 bytesMD5: c56a3f97dfc755e9364edae0c12d24c2
80fezahoyu.dll81920 bytes
81pep.exe41763 bytesMD5: 6983debe768648ed995b0902e4880874
82%UserProfile%\phc?????????
83mokehohi.dll69120 bytes
84XSBMON.EXE192512 bytesMD5: bb541ce011fc9f24ac7c5c11ccdb1420
85bopufeto.dll50176 bytes
86evejubet.dll194048 bytesMD5: 73b599d33ae2f39ef880ac2195ea6ce9
87lepopoka.dll50688 bytes
889f.tmp373760 bytesMD5: 753058870a5c60659f629f1be9758ab5
89agemtctl.exe,TTzwd.exe,3Tzw.exe65536 bytesMD5: a1b86b52bb6e141a094464b9429c05ce
90evizavohiyesupa.dll186880 bytesMD5: 93e22d9b2653be354a9214a8d1915d47
91mmmrhacw.dll47104 bytesMD5: 10a14f8c5892ae058b0a7ad690d7b8d1
92Dll.dll13824 bytesMD5: 4a110a7e3889a48a66a4b5453c382ef2
93a.exe74752 bytesMD5: 82c72af61d70022b53f6d7a8b198f1f2
94photo_id.exe27755 bytes
959.tmp81920 bytesMD5: cd1f1696515aaf21bf7ce38670aca395
96LSYSTI~1.DLL65536 bytesMD5: 0585d6a369726d96cf3bdc95767f1eab
97mscheck2.exe79188 bytesMD5: 8d0ee696ba00f43ca5cc57b0224a8d38
98sumonibe.dll49152 bytes
99cfrog.exe13312 bytesMD5: 6f2e7ae0d178b933f20942ca70ee69e1
100q7[1].exe177664 bytesMD5: c6e5dc1b9db284bce329d1ffd3dbe9e6
101soundmix.exe16896 bytesMD5: cbb4589423773e45c296071c97c729b0
102TubePlayer[1].ver.6.exe49156 bytesMD5: cfd6c6cab652cf677ea03d131e6df858
103kory.exe92672 bytesMD5: 0db0abdcf82af6f56402d11cca6ad0dd
104nupotuku.dll48640 bytes
105winlogon.exe505344 bytesMD5: 42d8303e00cd0545182bbd202900194b
106tlahidonokecikot.dll40448 bytesMD5: 5db1afcda473b31f71f9c8a0ba21f200
107sonuleme.dll88064 bytes
108kurtapt24@yahoo.com9458 bytesMD5: 2e124646bd0fbe6838796bd181df0eef
109taskmon.exe38912 bytesMD5: 7b3c9d8e4deba2027fbbf00a9b4f2fa8
110kulo.exe118850 bytesMD5: 8a37ecc0344edbdcff843f01e4db160a
111nupanogo.dll107520 bytes
112SrvAlrt.dll14378 bytesMD5: 1c5480e1156f515e8790229e182c19c3
113hekeyapi.dll89088 bytes
11467xv511g.exe42498 bytesMD5: 75af8aef0381fa32f2567a869beb47ee
1152252500.exe89088 bytesMD5: 2eeff90ab3df88dc9ae02d22fdfbb094
116dodohovo.dll107520 bytes
117bdsyslink.dll86016 bytes
118%ProgramFiles%\blphc?????????
119nvcoi.exe57344 bytesMD5: ef06b65121d338d8f6063b1a3a640cac
120unapatax.dll182272 bytesMD5: 13c74cdba40b44b226697a503a1efe5f
121PCFreeMon.exe409600 bytesMD5: 51b5f8a20f6126f559c543f3d7bd7d1d
122goo[1].exe155648 bytesMD5: e6245881c2d132c4ba9465599f2f9979
123xoipk.exe142848 bytesMD5: 97c65e1c3df2ea29ceb58b3390bd0b37
124uheludeje.dll173056 bytesMD5: b34cdd55229d93f43cebd8bac52597e6
125GetModule24.exe367104 bytesMD5: 6290091bba29a0424fa5ff050b1eb77f
126pehuraba.dll88064 bytes
127nobajanu.dll81408 bytes
128cbsj0jry.exe40962 bytesMD5: 12e5d4abee0e6385c46f964d7f8cf469
129MsndkHelper.exe232860 bytesMD5: 6ca5e0073c5b56e473628a5cecb1aac0
130GetModule23.exe364032 bytesMD5: 9fad18271a6576613a4f6f573e58dbe8
131uvojigulukacega.dll181760 bytesMD5: 8ba96641c0cf6ba391ad8b6081ba36e7
132zyex.exe132608 bytesMD5: 1879ac641af2e71f26905cb048a07857
133~tmpv.exe86528 bytesMD5: 5268d175825fe56d5ad6144d5af5eeb6
134zipavagi.dll50688 bytes
135testabd.dll24576 bytesMD5: 3d6e12904b999509981750f4e42dc636
136bok6835v.exe41474 bytesMD5: 8afc2e98a9fa1afad5eaa2b73a5e7f99
137idxuctiadbjqbvlt.dll171520 bytesMD5: 45e408cb6c0bddf791dfe7f5a8f7748a
138dd.dll47310 bytesMD5: adc1e2a574f5b85c126c1749995e07a7
139scvhost32.exe151040 bytesMD5: efc76d879e8b0da559ef11027b7b1dbc
140balomane.dll80384 bytes
141tcxYF.exe176362 bytesMD5: bb6b2e25a5506ea2a92ad583a5cf3313
142msnm.exe374805 bytesMD5: b2fab7d1d850fe2346ca94841b272af1
143~tmpa.exe93696 bytesMD5: 062d756070c4aa99845c08d0c1c27bb1
144iecompat32.dll390144 bytesMD5: 02823c5c220298ec985375d9ca0d0404
145miduyevu.dll89600 bytes
146bisevona.dll78848 bytes
147uhoyureg.dll182272 bytesMD5: e27f0bd6b5d9af43fd35abaa37123f54
148alg.exe34264 bytesMD5: 3336dc9e791ce29e50da64edda657874
149cftmon.exe73426 bytesMD5: 093d535d1f45f1ee9491c84da0d1ffc5
150wintipgrd.exe1419776 bytesMD5: 584e02bc0b71cea43957160d28318b6e
151%ProgramFiles%\rhc?????????
152podmena.sys9472 bytesMD5: be860349aabf8d6b4c724da73843125f
153ld01.exe
154fenofaki.dll87040 bytes
155_adA.exe151556 bytesMD5: 7682909df756c886ee64428a21e98ddf
156liser.exe57344 bytesMD5: 205da52de1e856b51e381c20e3ab046e
157fd.dll5632 bytesMD5: 40ba7ab2ba85d5fa7404ee99bbdd6f69
158SHDOCVW.dll1482752 bytesMD5: 0bb75bbbee1240c2b49ed38c858a7a5f
159jfkrgotvbl.dll295936 bytesMD5: d31d225923eac2fdfc8355223a1ce125
160bpvol.dll10752 bytesMD5: cb85419e8cf78e9a33297efd3f87a73b
161dot3cfg32.dll119808 bytes
162ptidle.exe56832 bytes
163PowerJa.ask70777 bytes
164sdasda.exe66560 bytes
165zarebeba.dll50688 bytes
166FixCamera.exe20480 bytesMD5: 6f9455f97d5d91fdeec0f344e70a2d0e
167sujibiwi.dll50176 bytes
168RqAds.exe135168 bytes
169servises.exe24064 bytesMD5: 27944fc648cccd66084d05a21cf410bf
170svchost.exe109228 bytesMD5: 20581fabf5d4927452bc8fe55097d234
171md.dll29696 bytesMD5: 022ad402acfbb80a80fe53945f429409
172msword98.exe26935 bytesMD5: 7210b53888e6e1a6984e17d72bb822d7
173svshost.dll2560 bytesMD5: 5306c45838bdaa5d596f01d05b13e123
174sekisahi.dll48128 bytes
175zs880000[1].exe108032 bytes
176vcnews.exe2784256 bytesMD5: c8009d121e537630ee9d97578c4249e8
177rs32net.exe22528 bytesMD5: 204336ee0680808e19aa7c351f4d2629
178yovalono.dll49664 bytes
179delidubu.dll89600 bytes
180hnjhepnj.exe, twain_32.exe15360 bytesMD5: 3d133ae332ea05823ddf0907c3a26348
181820233103.exe
182eventlog32.dll135168 bytesMD5: de7c6c753ba2b54c3080fa1d7189b294
183sysftp[1].exe,820233103.exe,809353461.exe,sysftpd[1].exe34816 bytesMD5: 30130f64b90770105d20bbb46f1596c0
184avto1[1].exe
185winmyy32.dll39424 bytes
186__c00F296D.dat25088 bytesMD5: 5117367eb536360dd103f69b68695433
187BTNRENC.EXE31744 bytesMD5: ab94bcdd992637454a0c8935466c94af
188%UserProfile%\Application Data\pphc?????????
189rigiwoti.dll81920 bytes
190lgjklyrm.exe90112 bytesMD5: c548e431ca7bb5119692a362525bcf6e
191svchost_32.exe27648 bytesMD5: d4cc2cc6029ac62d70530439558bf190
192%ProgramFiles%
193beipq.exe169472 bytesMD5: ac12fcef12aec513bd5e8e8fcf389e1f
194hepigalo.exe
195jelayube.dll72861 bytes
196SYSDLL.exe17408 bytesMD5: 4bf2a453fce39e60262bcb9859f7bda9
197kylo.exe116736 bytesMD5: 9393917d6f87dadf94d2ccaead23f380
198B2e61bdMX2oiZ.exe378368 bytesMD5: e1629287ca4632f28057ff69187dcc4d
199promo.exe31232 bytesMD5: 1ec93eaa7ba8fef99e00d26185b7f520
200Twain.exe61440 bytesMD5: 173cfb5c220013c4117ac25f40e71610
201akihovojamaz.dll180224 bytesMD5: 859e7381425e73ec2d908216567448e4
202eruzurow.dll180224 bytesMD5: 63178a01d821357152f686e70909bf3e
203ajas.exe196096 bytesMD5: 39ed0421c5e8bd511bc49927c81d59c6
204alivevukov.dll179712 bytesMD5: 64b417db53c23d036d2843b44c22bb7c
205uclyv.exe100352 bytesMD5: 904c33d27f3b145fbb9506955049d90b
20654.tmp.exe86020 bytesMD5: 75936b242a164487ab01b0961d5c690d
207bndmss.exe31744 bytesMD5: 523f3cf252a6e3ee6de7dc84bce8ab96
208kedisuzo.dll50688 bytes
209bdaplgini.dll84992 bytesMD5: deacbaa2ddf8597cdf1985e2950034d6
210f4f.exe77824 bytesMD5: d89bb1499758709da3bdb15071c27b21
211userload.exe45056 bytesMD5: d1df8099720d352b77d80033e72feab1
212cogad.exe56832 bytesMD5: 36ad7a012dd20f01a379a60f11b350e3
213uvumaxeqa.dll186368 bytesMD5: 1d2f7578eeee5cd17d39e57dd6de31b0
214yopalimi.dll106496 bytes
215baracudanew[1].exe
216spools.exe41321 bytesMD5: 97645d946a25b774231cc30a1669a17a
217lawawafi.dll97280 bytesMD5: 46db5639e141972ef2a5b59606da020b
218%SystemRoot%\System32\whc?????????
219pm_proc2.exe100344 bytesMD5: 6396c3e35aafe388c032fd96a51c8f8a
220dxva2C.dll62464 bytesMD5: 41cb45cccc9897274d77c847ba946b6d
221zxpkktwt.exe15360 bytesMD5: 2ee727f416d0fc6c1e9a3a1fc3812dd9
222svcchosst.exe101376 bytes
2238B8.tmp368128 bytesMD5: 14997a8ac270980608357d62964df41d
224yybc.exe176128 bytesMD5: 71ca0f7b1ed5b236c631540cd0b176b6
2250a5f00962.tmp64000 bytesMD5: a91d2d5d1d12e87be085066fa7184aa6
226fozusayo.dll49152 bytes
227uzewerilupavid.dll186368 bytesMD5: fa537293c1587d408722591ed4020a20
228vabofoka.dll48128 bytes
229NewSecpol[1].exe, secpol.exe17408 bytesMD5: 4ec0a9461311afc3e472d24e0bff1f40
230crypts.dll33280 bytesMD5: 0b4f0240107e1d529db3e35c9d638131
231omshtup.dll74752 bytesMD5: 5c4a9189143898c880c685baefe0949f
232setupapi.dll983552 bytesMD5: 7808313cbc634ee08346d5ddfef1cc5f
233onifr.exe147454 bytesMD5: 055c5d04c1cb3c4945637d38c7ba9933
234LcodecPlus[1].v.1.exe8192 bytesMD5: a8298fc139035c7108a4d4b72450b74a
235ctfmon.exe291908 bytesMD5: d3aa69fe0e7fd72099d10506e926817d
236clcl16.exe399360 bytesMD5: 7245d85b7d5b060d3a1cf0153ebbdd83
237q6[1].exe177664 bytesMD5: 39d0b73b6ddba211658b3b35cef180e7
238scerpt.dll7168 bytesMD5: 9993b724e7cfaf7d879d1cab16b25da5
239potibubi.dll50176 bytes
240%UserProfile%\pphc?????????
24139942.exe10752 bytesMD5: 96c798d1b63868ec666b3b8821e8deae
2421[2].exe20502 bytesMD5: 6a777cd9afb4887eddaca54aca458e64
243E7Cx1XQ.exe82432 bytesMD5: 4eaa2a799120642860e9d82563ae7313
244DNTUS26.EXE73728 bytesMD5: 6c8e94c4bdb0fb718c7f31d8f0f6a48f
245winrop32.dll18944 bytesMD5: 50936bf066e5d27ac13ce55ede05d2b9
246poqii.exe147445 bytesMD5: 9372599a17d10580496c99fb50c62fdf
247JavaUpdate.exe1657344 bytesMD5: 0f62157f848205ade52648c9379ae648
248%UserProfile%\Application Data\643f??????????
249hnwqrys.exe368896 bytesMD5: 3603e534db5178036425c5e6bcca8ee4
250sihosido.dll108032 bytes
251pjdeya.exe597504 bytesMD5: 5d4743a302e76421c449e8cfc2d8be2f
252winhlp.exe104448 bytesMD5: 86305f32fcd8799fdebaea9591dc6ca8
253dmutil32.dll198656 bytes
254iksuy.exe140151 bytesMD5: cfc995ef0b0728896b5120c5adf214e0
255explorer.exe3265079 bytesMD5: e2da1cea135d6f225a88e1928c7dc99e
256d.tmp374272 bytesMD5: e57b9492a4393e2bbdc43474184e9690
257tmp100031.exe12288 bytesMD5: 828a383370e909eaa6986cad3ebf1499
258cmdial3.dll122368 bytes
259%TEMP%
260svehost.exe73728 bytesMD5: 61c8339fc77ec99480f5f0b84c6a8e38
261%UserProfile%\Application Data\thc?????????
262Counter.exe53248 bytesMD5: 4cb73ca203f42bd1853a43d59521f96b
263cluhtj.exe36352 bytesMD5: c5d1bd0c682106929f3fb2efbebc7f48
264AdobeSoftVaallupjhn.exe507840 bytesMD5: 86c6ad598623186d95a83b4b86180ab4
265iovtvnfa.exe15360 bytesMD5: 9d37f1cb24a9825ec6afd10d097c33b9
266GetPack24.exe350720 bytesMD5: 33777bae0d5ee0bce992e0350017b3cc
267%SystemRoot%\System32\bpph??????????
268kafunepi.dll80384 bytes
269Warn Support.exe704512 bytes
270ixelinet.dll182272 bytesMD5: a1b569c180afb2dd878a45bba9c078d4
271%UserProfile%\blphc?????????
272idumowapupiy.dll183296 bytesMD5: 039e2ad7866d29aa5751b3810fd015fc
273yosineku.dll89600 bytes
274viwc.exe334422 bytesMD5: 7eb0488ae9323e01afa13c9f46b4a012
275bdsl2.dll86016 bytes
276VCL.dll335064 bytesMD5: 85e369896d7049fa73dff2064a9df4db
27780353.exe10752 bytesMD5: 250b6f7b6f25d0c58788df556497680d
278q3[1].exe177664 bytesMD5: 09dceebef459414871ca668d721d3198
279vupesasu.dll64512 bytesMD5: b5b5cc712268472c9e92b81f54a385c4
280hcasfg.exe172032 bytesMD5: 57f1a80fd17e42806762fbad45628c33
281NOD-UE.exe216104 bytesMD5: b3b1d08902abda9f04365b2348aaba2f
282ufimixefenoy.dll257536 bytesMD5: b9407a6531a93d27f4a970f3b849ee9e
283dijanumo.dll133120 bytes
284avto[1].exe
285udihozazohec.dll197632 bytesMD5: 8e4bd6bf49fa29c52b564f0c3255cfed
286FreeApp.exe382976 bytesMD5: f9e3c04234bdb02eec91215f0f5bda14
287caese.exe116736 bytesMD5: a3e5d6733da460ebf9d0c4332bb95f37
288robejaku.dll88064 bytes
289oxuvewuc.dll24576 bytesMD5: f28e184dc0a166e685398b62de924cc6
290%SystemRoot%\System32
2918086983.exe455168 bytesMD5: 1d278267dfbe93494afd431c661824ce
292%UserProfile%\Application Data\phc?????????
293Facegame.exe56320 bytesMD5: 36cb5eeaad4045bf7b7faa9e00746c65
294mssrv32.exe41478 bytesMD5: 21dec97b096703797a66ef62add96723
295sjg9s8guigjs.dll15000 bytesMD5: be64c8d27e584847f53a05c97a50876a
296odbn0.exe295424 bytes
2971793357.exe449024 bytesMD5: 332539c1ac6a5257a368dd9b22e4868e
298q1[1].exe177664 bytesMD5: e55d9e2bf2b9af6415c7f52e6a08664b
299ezcron.dll36864 bytesMD5: 6d9d68a880e4d7767813cc78a0c99c52
300%ProgramFiles%\bpph??????????
301%SystemRoot%\System32\phc?????????
302%SystemRoot%\System32\pphc?????????
303arpl.exe8192 bytesMD5: 6eecbe1e5d39c14533551bf4b20a54c6
304doriyubi.dll49152 bytes
305jhxm32.dll29184 bytesMD5: 46bd6c40a886049b723777d3aac5cd2a
306GetModule25.exe367104 bytesMD5: 7f98bb1ca92afce707d1e2913151ee86
307nutowuko.dll71680 bytes
308vybi.exe115200 bytesMD5: dbdf452705cb7e45fee3063e1e12f99b
309SayTimeMain.exe1429504 bytesMD5: 1e910179fa25bc952457dc3aa92c9a32
310autorun.exe61440 bytesMD5: 3a9bcde21a8d27f0c4b7f43615e0e821
311lopibeki.dll70144 bytes
312tarowata.dll97280 bytesMD5: b3f9346c6fa39b323fa3e569e7f9b075
313teste1_p[1].exe
314207163515.exe892416 bytesMD5: 695a8155cf64fa91f33241cb825a78c4
315new26[1].exe51712 bytesMD5: 60e1a6c8aef35630f48e1ddd39cd7de5
316%SystemRoot%\System32\thc?????????
317kavumefe.dll81920 bytes
318hnetcfg32.dll135168 bytesMD5: c444d8fbbc2644b73d506a91cd88625f
319oqarib.dll41984 bytesMD5: ef89d54c3f78e803f9816b7c5953244f
320sysfnx.exe454656 bytesMD5: bf38290e4b197faf16cd6db040b3c0c6
321sysrc32.exe12288 bytes
3221mes8hd6.exe16896 bytesMD5: 7cc6e68957d40710c033f8c2a4fa99f3
323~tmpc.exe87040 bytesMD5: 56cfd76107dc7af50826e43142279885
324nl5.exe1464320 bytes
325get_wabs[1].exe326656 bytesMD5: d13c6e0472f1122937145e627a3f5207
326fwtrtuqtssd.exe262144 bytesMD5: f3992fde36ff8e1ebb24d1e0f3cb95ea
327xSiyUgc.exe83968 bytesMD5: cccf02e55cf8a7795e87328fb6fe5d01
328pivumedo.dll190976 bytes
329wisegava.dll50688 bytes
330sesanujo.dll70144 bytes
331zumie.dll3584 bytesMD5: e597db498fd34ba71442d6fbc3f4b59e
332wehebopa.dll50176 bytes
333jnbvog.exe75264 bytesMD5: 0e3df308253dd58440de1a85800482d6
334uqogumamumuse.dll183808 bytesMD5: f9dbaec1d7f298488edd7340029f808d
335xsl27629.dll176128 bytesMD5: 26006c6929925e2417bdbb3177f7a982
336svzip.exe203264 bytesMD5: e18a5ee6efab3f4e64ae32b1200e4c60
337TfoQAsn4.exe114690 bytesMD5: 5c519c4d86010393cee4dd21eb26cf41
338idolowun.dll180736 bytesMD5: 15689f041fb926413e423597a913f5e2
339sysmgr.exe46080 bytesMD5: 3f649d096d1d87a16eeea171d86d3c0e
340zofowoda.dll50688 bytes
341naomf.exe1253448 bytesMD5: 910cd709449eeafe5c20b76bba8b1aae
342dizubure.dll66560 bytes
343gabpath.exe598016 bytesMD5: 9c63e4529c96f277131f4c78b7bd0df8
344livukafa.dll49664 bytes
345winlo.exe1220215 bytes
346iqugumamu.dll183296 bytesMD5: 3a18d024f36469eed2cc3ef1e6648725
347default[1].exe2048 bytesMD5: 8e0f2f3ecb2bcc8a3886fb3d6776ba0f
348r3gk0iax.exe62976 bytesMD5: 5858a0a3f4a187eeaa52c6c3dc0fde5c
349Ffodoa.exe163840 bytesMD5: a5690ed0f4f2a3184fd469d5be888072
350SystemAutorun.exe377344 bytesMD5: a1451e7535d918f60a31409acb76186a
351accessv.exe
352msncache.dll44544 bytesMD5: 140d34e4e1c4d844851e68c2a789db58
353rdolib.dll30720 bytes
354relereni.dll87552 bytes
355iexplorer.exe210432 bytesMD5: a4f8a24a7aa1bd24c8475e12301b8582
356lewiyidi.dll49664 bytes
357lobkavuboo.dll166400 bytesMD5: e897c02175babec6b2fb2e6215c2e781
358sgpron.dll62464 bytesMD5: 261b36cee988614c50f1d17100409f3d
359fahokipa.dll86528 bytes
360%UserProfile%
361sysload32vh.dll4096 bytesMD5: 17722a6919386877f4b8ff9c2d2afc51
362tpsaxyd.exe157696 bytesMD5: 25e62ad9b7454477b966e84427f2d3f9
36310411[1].exe60928 bytesMD5: 02923b10e87a32bf64fb1b871e5b2eb8
364eloheseweriquyi.dll182272 bytesMD5: 351a14711242221e54e0a1920a82f4de
365teste2_p[1].exe
366d.exe87552 bytesMD5: 0d7cbf822cca7a05a1b505d46aa39238
367load[1].exe16896 bytesMD5: d8352707bd91be935756bee2a91dadd9
368kalerazo.dll88064 bytes
369%ProgramFiles%\pphc?????????
370DesktopTool.exe167936 bytesMD5: c57a0bf6243c581ad367e6aecb17e165
371oviyukebicitaq.dll189952 bytesMD5: 26e0901133821a1a844fdf9f376a2220
372services.exe43520 bytesMD5: 87eb7388bbca55d29f8eaacb58180074
373ClipHelp3xx.dll86016 bytesMD5: 0a102507a28680434a8231199c7ac913
374ajuquqoqepoqu.dll179200 bytesMD5: 101c7b1219b42021916ee9f7b7836b23
375mokyquij.exe285184 bytesMD5: cef89d9e97afa7ac44326de704333300
376nahatona.dll106496 bytes
377ktgmhs.exe61952 bytesMD5: 9a0daa34e46178974452863248054404
378wincsycc.exe11264 bytesMD5: 591346cdb904691f47c51e17aca121c3
379q2[1].exe177664 bytesMD5: cded350dfea06d8f30a9d98623d6129c
380csrss5.dll60416 bytesMD5: f9b7362c94497e0536b08fac8dd441a7
381luyehije.dll87552 bytes
382%ProgramFiles%\thc?????????
383hgcheck.exe89772 bytesMD5: 5f0ed8815f6cc8e8e533e1c747ed6b76
384molocha.exe276539 bytesMD5: bf3f45a8702980f9866c0bff7052bfa1
385penis.exe90112 bytes
386svcnost.exe77824 bytesMD5: 5cfba96ea9b51ad953809c4ec2a944bb
387windmh32.dll12167 bytesMD5: 658af36153b0121bf252bb9dc87e9088
388MetDDE.exe69632 bytesMD5: a2d46a88740d09934f3cccbddcc85aff
389xipr.exe184848 bytes
390wujiwibe.dll88064 bytes
391QoS.dll69632 bytesMD5: 239d3153ef14d3f56506e817fc2669a8
392StartupMgr.exe475136 bytesMD5: d3479142c846e481ddfd7abf95d3d0b8
393asycfil.dll123904 bytes
394SysteM.exe68096 bytesMD5: fb95c76a52291a4229355309cb825795
395%UserProfile%\Application Data\whc?????????
396soxpeca.exe41472 bytesMD5: 580ecc4ef07e4d92f2528c2848fb3bbe
397roam five.exe700416 bytes
398UnLoad.exe37888 bytesMD5: 437f7b6ff7982015788b28d66f49ba2a
399fechme.exe32768 bytes
400tuvUoPIc.dll29184 bytesMD5: 0edd521ec0e677f7b45a23b95f510251
401zorihali.dll109281 bytes
402itufijorece.dll207360 bytesMD5: 3334de88ae7ce7034ff0b075ec923599
403zemupalu.dll89600 bytes
404bufezeza.dll80384 bytes
405rtenazot.dll102400 bytesMD5: c3a7b6e05ff63c80f0e7c5fbf083b83a
406sysftp[1].exe
407ccsx[1].exe,Trojan.Generic116736 bytesMD5: 3b4bc9e9dedd2b860d604a3f83186729
408stuvwxy.exe
409sv.exe202240 bytesMD5: 3e6a990438c37ffdaf8bbedffd6daf6e
410vopereso.dll49152 bytes
411zelovumi.dll49152 bytes
412mivalivo.dll49664 bytes
413MySelf.exe571392 bytesMD5: 6e01f914fa6edf1df717b293d2265d68
414VKNT.EXE75776 bytesMD5: 9e8bbd55991166b3d0db6c6bdd8da409
415pascmgp.exe438272 bytesMD5: e18777a913aa00cdf543c89bd3e271cb
416MDM.EXE22016 bytesMD5: 5fab5eb60cadff79ba706d792028e08b
417ayscjcts.exe73728 bytesMD5: ce38101a3995438a891466d6a0fb9df7
418%UserProfile%\lphc?????????
419~tmpd.exe93184 bytesMD5: 0fe696aff9bec0b63d9b77e3d9413441
420GetModule26.exe367616 bytesMD5: 9ca11f3c9d0c1ef635eacf8c2a034c12
421ovamudutibofe.dll195584 bytesMD5: 636d4967bd46a237f681c8339559688c
422mivi.exe171520 bytesMD5: 947f14f76240dc31ff436dc3ff906114
423cajiw.exe557056 bytesMD5: 6222d185dbfd393c9208e3e19cd3eee1
424debodoro.dll71168 bytes
425nsx23.dll1351680 bytes
426AcroIEHelpe022.dll216400 bytesMD5: 417958dc10a28999d539ca25fb35f884
427%ProgramFiles%\lphc?????????
428xmvi.dll33792 bytesMD5: 073742add793c533e886c56eca19c767
429AvpKbd.dll13866 bytesMD5: 3d2872ef05e869a68c99c37700377f43
430mjc.exe145408 bytesMD5: d7a749f9545c4b195ba68de5e07a2d1d
431juriyuyi.dll50688 bytes
43210901[1].exe15872 bytesMD5: 0ec3f40f13511b2029893b648d8647bf
433crss.exe69582 bytesMD5: ba673a3c6be69f0703a2e8165aeefbb3
434UnknownSetup.dll18510 bytesMD5: 6dbe6c126db24660fbb74f8417525583
435ip_fw.sys28800 bytesMD5: 7894251573f64b42eddb730ed3165686
436tepepife.dll70144 bytes
437palowaru.dll48640 bytes
438GetModule31.exe367616 bytesMD5: 74ee0a87bfc4c7be1cd822eab1a7fed2
439yiklrfqsko.dll177664 bytesMD5: c4ff05912deaf57d0d83d11707d0c3e1
440dibawumi.dll89600 bytes
441fehamito.dll50176 bytes
442jahasike.dll48128 bytes
443dx8vb32.dll139264 bytes
444wininet.exe,1[2].exe94208 bytesMD5: b0cc27a138575533af8acb762e155ea3
445uyuhapuhid.dll195072 bytesMD5: 5f6b1405d57dc8df91144601b605e3ae
446Mjcore.dll112128 bytesMD5: 78e42e862394b018b9db226fd9850437
447sysftpd[1].exe
448teste3_p[1].exe
449ijucahalevet.dll181760 bytesMD5: a4687240401c1d4ef8e1bead595cbca3
450Lxh.exe169472 bytesMD5: 9f4ab3be9eaba698dc0e0f7c73a95558
451drvcd.dll14886 bytesMD5: d741347e64f47150d973401bc6c8c08e
452mejiyolo.dll88064 bytes
453CbEvtSvc.exe99840 bytesMD5: 322203725a65de0b24976c379563b9b2
454iSecurity.cpl6144 bytesMD5: f23cf8169780e82b462596c07446bef7
455%UserProfile%\whc?????????
456TubePlayer.ver.6.exe40964 bytesMD5: 20382cd32ca75a220d98f6ee0321a2a4
457%UserProfile%\rhc?????????
458d3dx9_2832.dll135168 bytesMD5: 746bdd7d01eff41ea203a959e22bcfcb
459lsass.exe237056 bytesMD5: 14fb62117d4deb631525a34a7344ea89
460lsivs.exe172032 bytesMD5: 3d1987195b0ede8d523e71a53db059bd
461%UserProfile%\643f??????????
462osidfjklsdw.exe288200 bytesMD5: 04955fd6dcf6304719c5b2c54f7d2c85
463iyupodovujepope.dll194048 bytesMD5: 20df5aee46a31774c749f9945b711641
464logomafe.dll88576 bytes
465%UserProfile%\thc?????????
466ccodr.exe18944 bytesMD5: 459c57f0bbbb10a74c7e40c98d78d495
467trialiis.dll54784 bytesMD5: b066be644121f06b6d507832b24844c9
4688.exe233601 bytesMD5: a1e10d1993eaf6bf11ce023ddb11c2d2
469nl2.exe1918976 bytes
470%SystemRoot%\System32\rhc?????????
471akuzivazoveraxif.dll185344 bytesMD5: 8ccb115f9ae7f00b03e5fe57313915c9
4721F5.tmp.exe96256 bytesMD5: 120723d8dcf6a06495767e30999e1d75
473spywaredetect[1].exe
474__c0091c40.dat30208 bytesMD5: 3aef5fad0ea7df747d87c8b68d8dcc18
475tikatabi.dll80384 bytes
476winlogin.exe856635 bytesMD5: 68ae154089846d5866a3961b62780f32
477mulirowo.dll50688 bytes
478oyuwopoze.dll183296 bytesMD5: d49dfd4cf9dd4128c42423d2809f24dd
479asade.exe133120 bytesMD5: c5ed7ab3a7f1b367bc77480907a71274
480nageduge.dll50688 bytes
481Packer[1].dll10240 bytesMD5: 7ff33af50bf5812ff53ee43d02cbc0a8
482addpn.exe11801 bytesMD5: c3a081da7d4bd8f65eb496fc8e456d4e
483aim remote.exe683520 bytes
484atl7.dll122368 bytes
485aq[1].exe207726 bytesMD5: fea22e004d5ab6db98220284de477403
486vubabuku.dll48128 bytes
487papororo.dll88576 bytes
488ehczrw312.exe1150976 bytes
489svc.exe179200 bytesMD5: fdde49b3668c5ac1704a99d9567f0888
4908[1].exe,_ad9.exe551017 bytesMD5: 0db04f38181bc16312afe001f7617f7e
491JavaRuntime.00.exe581120 bytesMD5: 7b4951d68f89aa59002d9289e63d87b0
492MonCheck.dll18698 bytesMD5: 1967a569277b94265f7283fdb0eff402
493jimofiji.dll49152 bytes
494realsvc.exe143537 bytes
495barijatu.dll50176 bytes
496mail.exe13312 bytesMD5: b69ab9adecb74281b2112f31ed02b210
497nuviyapi.dll49152 bytes
498userinig.exe128016 bytesMD5: 0851e65e336c6a94796296452362ff2c
499teste4_p[1].exe
500kusers.dll205840 bytes
501Tierlir.exe,TT[1].exe61742 bytesMD5: 914e102b29b912c77d9a2c657a0dc730
502%SystemRoot%\System32\643f??????????
503tijawani.dll50688 bytes
504rexsvc32.exe1735854 bytesMD5: 5b0a5c74d78559d8a7367c9719cd40e5
505%SystemRoot%\System32\lphc?????????
506srenum.sys36480 bytes
507svx.exe179200 bytesMD5: 12ec58aab6d5638efcf3c4302517e682
508ugavisidu.dll180224 bytesMD5: 6aa2d902c4637662f7dac98aabf95544
509bGb.exe176362 bytesMD5: e1161977ee96bf4501d433fcc9220465
510nl3.exe1891840 bytes
511nvvsvc.exe93184 bytesMD5: bd3f08311b90cf0a7b949f7474473719
512idojapimogudoray.dll185344 bytesMD5: 6b08c208052f9e5cc2190d6801ac1b9e
513winsys32_061230.dll86016 bytesMD5: a8d196ffe40607bde5e9b26719b790e2
514p7ex40uo.exe37890 bytesMD5: eb1a6c8a847dac1349022011fb7ad5b4
515mrcmgr.exe94720 bytesMD5: ab50813160d10f25b9fd55d48f5b86f7
516nl6.exe1453056 bytes
517vmitla1.exe26112 bytesMD5: ffca349e6cb0be4b045f28446a7c23b1
518svw.exe179200 bytesMD5: a29364f32c3846181cadde9240ca4876
519ppaeuah.exe74953 bytesMD5: 0848e296775c6da135ada6f6243aa510
520tiobdfkehemjx.dll24064 bytesMD5: 96d273d795688816a89f41178c6485ff
521mukejowe.dll89600 bytes
522muyinepa.dll80896 bytes
523tzqaplu13.exe10241 bytesMD5: 7d5e5e4095d368730e4bb31eda13e1d9
524flsysio.exe371200 bytesMD5: 386e79decf1debf931692da686d2941f
525cdcw.exe274432 bytesMD5: 7ad7e338fdb7276dc788dca85b915052
526wuauclt.exe84480 bytesMD5: dbd8079e1fd194a32d24dd95c3cdb490
52711002[1].exe15872 bytesMD5: 0404f5f07561ff96490101c945f1d663
528ufdsvc.exe69632 bytesMD5: 99184adc5b7fab997146971f20afff18
529bbafgfbj.dll137728 bytesMD5: ca87f20354b8226cf55c05ecb024b781
530norozuse.dll69632 bytes
531MNl2fg.dll79872 bytesMD5: b9b3a4f131bb995aa1f8426c35137389
532digifast.exe225792 bytesMD5: 6ab29263ea43b66d2746fd7997b0f05d
533wirepots.exe8704 bytesMD5: 4c1fd02d449c708d7708deb17f9dc6c5
534SerialsWorld.exe1075712 bytes
535sysaiei.exe11264 bytesMD5: f26e196913390dbb9acb01c6d96af584
536DisplaySwitch.exe118272 bytesMD5: dde7ef6358e594956b13fc291d92e52a
537fsmgmt.dll50688 bytesMD5: a3caaec88a94e584736a280449b9ca60
5388[1].exe
539avto2[1].exe
540freereg.exe276992 bytesMD5: 23117816d27d971407e62b5843e1f053
541junefare.dll50688 bytes
542ree2.exe748032 bytes
543%UserProfile%\bpph??????????
544nkolxecj.dll33792 bytesMD5: 8409bd6382dde2378427802cb3ca85a6
545etomemap.dll179200 bytesMD5: 637e74ea2f3f3b948ca58a3f9fa9da53
546%UserProfile%\Application Data\bpph??????????
547BootRom.dll18654 bytesMD5: 9eb71a7230a3b1337ff61f6a5e45aaa9
548GetModule36.exe367616 bytesMD5: 78ed10ac464d64fd61f01ec25db66713
549emihotepopeg.dll187392 bytesMD5: 0df79c59f0e032e5bc995786d5815461
550zezowawi.dll106496 bytes
551qxepvqt.exe83456 bytesMD5: f7933fee69a07fa4ad2acf2112dd15c9
552juhalobo.dll109056 bytes
553pokumala.dll107520 bytes
554kdpini.dll192528 bytes
555wahayaga.dll49664 bytes
556svhoster.exe202240 bytesMD5: 70b823b8f8cfc015679550a156154d1b
557%SystemRoot%\System32\blphc?????????
558reqi.exe116224 bytesMD5: fb482abc534c45584bfab8e7c621b2e6
559irulusasiyuwam.dll178176 bytesMD5: 066db90be6f45540e15d1d928ab7f21d
560kl.exe1311560 bytesMD5: de97fad9b678743b357d9237cfbdcc89
561yikuhawa.dll49152 bytes
562pp2.exe11776 bytesMD5: ebe785b88411e41a68f2ce0affa4289d
563uqiwaceh.dll187392 bytesMD5: d7c17417a83ab2c658cb5c025f8f2500
564lol.exe180301 bytesMD5: e5c5d0f936b8cefe9fc41ea68906c278
565SYS32DLL.exe13824 bytesMD5: feb9fcb58b7537c47a0cfc1c00702b50
566HPIEAddOn.dll221184 bytesMD5: 2c96526419e5a0054dc3481ec01489f2
567digiwet.dll17920 bytes
568icaqx.exe124414 bytesMD5: 36547fb1efeb3d949032ab5bf8040c76
569yowujeje.dll48640 bytes
570tipifipo.dll109056 bytes
571nl4.exe668160 bytes
572_ad9.exe225280 bytesMD5: 457d47dbb13140d640e394503817fdb5
573%ProgramFiles%\phc?????????
574irxoe.exe116736 bytesMD5: 4f883bd12740c865a1765183767f979a
575comparevers.exe455575 bytesMD5: 832ffbc37551be1f9b14dd44a462d3a8
576xydzyh.exe45056 bytes
577KBDURsr.dll62976 bytesMD5: e3beace9fb53c4ea2a2a5517d76b5b38
578dwm.exe318464 bytesMD5: b9ec59d036d43e1302083ef3e48b1311
579oqifubeqixi.dll188416 bytesMD5: 611049af410f7421a4aa95dfaff83a06
58014578.exe48128 bytesMD5: 1918d01a239cf69b4e339bcdb5deb383
581~tmpt.exe95744 bytesMD5: 5f1fd4f36338c714c0d0f0394002ecc7
582bovekafu.dll89600 bytes
583ofriasc.dll79360 bytesMD5: 158568bd1c1926d357b66f18397c4c11
584moomqojucfqbs.dll296448 bytesMD5: 32e67e7558d3e1918103918fb34a978a
585afitegef.dll181248 bytesMD5: 561281ee46cf4df81d610382a80ec6aa
586%UserProfile%\Application Data\lphc?????????
587AUTOPLAY.EXE36864 bytesMD5: cba42f5e4fefdc19295def916586bbda
588nohisoye.dll108544 bytes
589worsock.dll10752 bytesMD5: ac873605e4f76e95da6cab54836d2a1e
590trial-reset.exe178780 bytesMD5: 64325992b448dc3f957bdfee25abed69
591runsql.exe202752 bytesMD5: ba702d98ac626c79b7a3b012ec4a0f03
592GetPack22.exe350208 bytesMD5: c9252d5f573c2bd4829d0d5170865011
593uyefesujoxumu.dll182784 bytesMD5: f42cc970e73eaee3d6419c9be9ced491
594csrcs.exe20480 bytesMD5: fb52692745918a67cbd7e9cc26982627
595bujiwofi.dll70144 bytes
596aaxiao.exe260393 bytesMD5: 233b86592d3c769e5044bf5dcd00032b
597ahuiz.exe
598baw7.tmp160164 bytesMD5: 64a34e22c2872fb56f7c29f3c11d8990
5991[1].exe72192 bytesMD5: ce64a953dc4b9ff7f26b525f9176d7e2
600refobaju.dll50688 bytes
601hovebipu.dll48640 bytes
602kekasika.dll49664 bytes
603dlcccomm32.dll135168 bytesMD5: 51983fbcd7893938515ce021b00ac063
604pinnew[1].exe28672 bytesMD5: 79c8911a9124871b14becf56547b479a
605systeminit.exe76800 bytesMD5: c435f3bf454091f652b37cc408dedcd8
606winsystem.exe237568 bytesMD5: ddbdcb4c3299bc9a3fe404ca4ac80a1c
607%UserProfile%\Application Data\blphc?????????
608dll32.exe14848 bytesMD5: 44ffc0527bbcf06fe9bc5b4cc343b88a
609%ProgramFiles%\643f??????????
610putmuk3110[1].exe,1132935139.exe96256 bytesMD5: 8cb1a76eeed653d942edf146d54bac66
611bupuyafo.dll89088 bytes
612topapope.dll80384 bytes
613penipure.dll50688 bytes
6144.tmp.exe88068 bytesMD5: da20840fc0f6048937a7fcafdb795fe0
615CDDBUIRoxio32.dll135168 bytesMD5: 8965c5949b9df0c2020f6cb38a9b6592
616mspsmon.exe37888 bytesMD5: de7ea2339f3217998e05c59c633ec078
617firefox.exe79872 bytesMD5: ecd71f1a4d2953beeb086109faf252e7
618morugawe.dll107520 bytes

Registerändringar:

Följande registernycklar skapades:

  • memo site kind that
  • \YURE.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run xqe6lJLnN1
  • \YUR14.exe
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSFox
  • \YUR6.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinPatrol
  • \Win14.exe
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify __c0040F39
  • RUNNING PROGRAM54.tmp.exe
  • cokx
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msword98
  • advap32
  • Captcha5
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSMSGNER
  • C:\WINDOWS\System32\kdmsh.exe
  • SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE gi985993737
  • \YUR15.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ stgclean
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cdcw
  • \YURC.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ C:\WINDOWS\system32\cfrog.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad fdxbameg
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ntuser
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\WMFMRNV
  • GetPack19
  • \VIE14.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\BTNRENC
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSDriver
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{25B8D58C-B0CB-46b0-BA64-05B3804E4E86}
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ip_fw
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Security Service (NSS)
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\navigator
  • Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run servises
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Desktop Tool 4
  • \YUR4.exe
  • \YUR10.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ cftmon
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ XSB
  • \YUR11.exe
  • RUNNING PROGRAM\2.tmp
  • 515.tmp
  • \YUR1.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winsystem
  • \YUR2C.exe
  • xydzyh
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\mbssm32
  • RUNNING PROGRAM\SYSDLL.exe
  • \YUR2A.exe
  • \YUR18.exe
  • %windir%\System32\kdmsh.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Trial-Reset
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ajas
  • Somefox
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\bGb.exe
  • Long Internet Team Stupid
  • RUNNING PROGRAM2252500.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A5B6916-ED71-4531-8018-E792DD44156E}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\UpdateNf
  • \YUR20.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\tcxYF.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winrop32
  • \YUR12F.exe
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{25B8D58C-B0CB-46b0-BA64-05B3804E4E86}
  • RUNNING PROGRAM\~tmpc.exe
  • \YUR131.exe
  • \YUR12E.exe
  • HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN yybc
  • BIND SUPPORT SEEK FIRST
  • Software\Microsoft\Windows\CurrentVersion kdksc.exe
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify cxqmyibm
  • HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN clcl16
  • \YUR2B.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {BB4C402F-882A-4526-8C08-51278EA437C1}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchost.exe
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\podmenadrv
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D34F5D71-99E4-4D96-91CA-F4104F69B8AE}
  • \YUR130.exe
  • RUNNING PROGRAM\~tmpa.exe
  • Software\Microsoft\Internet Explorer\Explorer Bars {C2EC2654-52F0-3E63-9017-D0FA8FA79271}
  • cont_mxlivemedia
  • ptidle
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WheresJames Startup Manager
  • software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad tfnslopk
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\woerom
  • penis.exe
  • Software\Microsoft\Internet Explorer\Explorer Bars {9CDB6E2A-B859-45BB-8F05-AF684301AB41}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ autoload
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ahiodwx
  • Facegame
  • Microsoft\Windows\CurrentVersion\Run\UpdateWin
  • Microsoft\Windows\CurrentVersion\Run\IEUpdate
  • Sys3.exe
  • SerialsWorld
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\windmh32
  • \Win10.exe
  • RUNNING PROGRAM\Explorer.EXE
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iviudf
  • \VIE5.exe
  • C:\WINDOWS\System32\kdwls.exe
  • \YURA.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ FixCamera
  • Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5348C01C-0CAC-DFC1-C2B5-A17C8F346C5B}
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ molocha
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ taskmon
  • {78B578D7-BCE1-4d83-9CD4-195BC34D8CB3}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\__c00F296D
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\cluhtj
  • \YURD.exe
  • RUNNING PROGRAM\~tmpd.exe
  • SmartMon
  • Software\Microsoft\Windows\CurrentVersion\RunServices\UpdateWin
  • \YUR12.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad fsrpknov
  • Software\Microsoft\Internet Explorer\Explorer Bars {EB9539EB-598E-BCA7-3D4A-82F4F26E9738}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ AutoPlay
  • RUNNING PROGRAM\tmp100031.exe
  • RUNNING PROGRAM\iovtvnfa.exe
  • HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN 1mes8hd6
  • MICROSOFT\WINDOWS\CURRENTVERSION\RUN\mspsmon
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Internet
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad rwlfsdmk
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {C14E6230-757D-4246-81CE-B34E2940C722}
  • Microsoft\Windows\CurrentVersion\Run\net64
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Host Process
  • Microsoft\Windows\CurrentVersion\Run\netsv32
  • {5348C01C-0CAC-DFC1-C2B5-A17C8F346C5B}
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar {3B4EFB6A-06FD-40AC-B072-1FB7D1D456E8}
  • {3BCF8450-D134-427E-AE9C-2A42CE8215CC}
  • MICROSOFT\WINDOWS\CURRENTVERSION\RUN\sysldtray
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar {8E21DC20-6E4E-42B3-9796-244EC9385CEF}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ NOD-UE
  • RUNNING PROGRAM\soxpeca.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\xlggarxl
  • software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad xokvrpwg
  • \YUR2.exe
  • \YURF.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Counter
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft Help
  • FixCamera
  • \YUR8.exe
  • \Win13.exe
  • {4D4DB474-8435-4FA1-8D91-512C0CE1E931}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Kernel32
  • hlpproc
  • Cognac
  • \Win11.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Vietkey
  • Software\Microsoft\Internet Explorer\Explorer Bars {FCDEE81D-95A3-AE8A-D4FB-5A9FB8E32860}
  • Software\Microsoft\Windows\CurrentVersion\RunServices\IEUpdate
  • Sys2.exe
  • \YUR9.exe
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify nnnkiGvV
  • Microsoft\Windows NT\CurrentVersion\Winlogon\Notify ssqPhEVM
  • Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run andfor
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ windows
  • %windir%\System32\kdwls.exe
  • {09E23F2C-ED1E-43FC-9AA1-1332162A35AE}
  • F5JMWNZTHI
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Java Update
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "SysRun"
  • Software\Microsoft\Windows\CurrentVersion kdid
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Explorer
  • \VIE3.exe
  • \VIE2F.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msvtt
  • HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
  • Online Alert Manager
  • SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {D3CCFAF7-DF03-4E73-95EC-E5E139CC2BF2}
  • %windir%\system32\kdswe.exe
  • SOFTWARE\Microsoft\Internet Explorer\Toolbar {57776700-7BC8-47AC-B43E-99C24B015570}
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Facegame
  • RUNNING PROGRAM\~tmpv.exe
  • SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad xrdwbfgn
  • \YUR2D.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MsndkHelper.exe
  • \VIE2.exe
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ pep
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SVCHOST
  • RUNNING PROGRAM\winlogon.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ promo.exe
  • GetPack21
  • \YUR30.exe
  • \YUR3.exe
  • HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WINSOCK2\PARAMETERS\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catal
  • Sys1.exe
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ aplmntmsg
  • Sys4.exe
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {0ba3e00d-b660-46e6-a2db-2672ee82dc98}
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{99C6D1BB-7555-474C-91DA-D8FB62A9CC75}
  • Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler {B2BA40A2-74F0-42BD-F434-12345A2C8953}
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\NOTIFY\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\bbafgfbj
  • Microsoft\Windows\CurrentVersion\Run\uwfsvhbssoldbasmo
  • Software\Microsoft\Windows\CurrentVersion kdmsh.exe
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ JavaUpdate
  • Microsoft\Windows\CurrentVersion\Run\netx
  • ROAD ITCH AMOK PING
  • \YURB.exe
  • {157627A6-2A10-4aa1-B97F-90B8DC6F24AC}
  • {E4785213-3EFE-4c26-A9B4-332440E31F6F}
  • lljyn_df
  • C:\WINDOWS\system32\kdswe.exe
  • vmdetdhc.exe
  • HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ kell
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{1004AAA2-63BB-0B45-B808-334D15814302}
  • MICROSOFT\WINDOWS\CURRENTVERSION\RUN\systemz
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ HKLM
  • Microsoft\Windows\CurrentVersion\Run\netw
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ PCFree
  • HKEY_LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENTVERSIONRUN nonep
  • \YUR13.exe
  • \YUR5.exe
  • bone thunk axis copy
  • HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Soltek
  • Microsoft\Windows\CurrentVersion\Run\netc
  • \Win12.exe
  • {0389E53C-62CF-4CD6-9F4E-955A740E4385}

Svar

Din e-postadress kommer inte att publiceras.

Namn
Webbplats
Kommentar

Enter the numbers in the box to the right *