ATIIIXXVI.EXE - Dangerous
%WINDIR%\TEMP\ATIIIXXVI.EXE
Manual removal instructions:
Antivirus Report of %WINDIR%\TEMP\ATIIIXXVI.EXE:
%windir%\temp\atiiixxvi.exe
We suggest you to remove ATIIIXXVI.EXE from your computer as soon as possible.
ATIIIXXVI.EXE is known as: Trojan.Clicker, Inject.ARKS, Trojan.Inject.fidr, Trojan.Inject.xPDC+5nA7hs, TR.Inject.fidr, Trojan.Inject, Troj.Inject.fi.(kcloud), W32.Trojan.WQWI-1046, TScope.Trojan.VB, probably a variant of Win32.Inject.HIKSRXF, Trojan.Signed, W32.Inject.FIDR.tr.
MD5 of ATIIIXXVI.EXE = 521ba9f041b33f1a1a84641ec7595f7f
ATIIIXXVI.EXE size is 61440 bytes.
Full path on a computer: %WINDIR%\TEMP\ATIIIXXVI.EXE
Related Files:
%Temp%\AccInfo.ini
%Temp%\CCProxy.dll
%Temp%\CCProxy.ini
%Temp%\ctfm00.exe
%Temp%\Language\ChineseGB.ini
%Temp%\Log\Log-2013-07-14.txt
%Temp%\zlib1.dll
%Temp%\~DF451B.tmp
C:\Documents and Settings\NetworkService\Cookies\system@baidu[1].txt
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3PCMMHXU\desktop.ini
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LUIIOHEM\desktop.ini
%SysDir%\7D1B3883.sys
%SysDir%\cfghw.tmp
%SysDir%\CLEARNLOADIMAGE.sys
%SysDir%\gametohw.exe
%SysDir%\Tenb7fc.exe
%SysDir%\vmb7fc.exe
%SysDir%\xxx.sys
%SysDir%\ztb7fc.exe
%WinDir%\Temp\atiiixxvi.exe
%WinDir%\Temp\clientbar.exe
%WinDir%\Temp\loadalljpg.htm
%WinDir%\Temp\md5.htm
%WinDir%\Temp\minihook.dll
%WinDir%\Temp\srtinfo.log
%WinDir%\Temp\_191968.txt
%WinDir%\cklisten.exe
%WinDir%\KB2536276666.log
| %WINDIR%\TEMP\ATIIIXXVI.EXE | Trojan.Clicker, Inject.ARKS, Trojan.Inject.fidr, Trojan.Inject.xPDC+5nA7hs, TR.Inject.fidr, Trojan.Inject, Troj.Inject.fi.(kcloud), W32.Trojan.WQWI-1046, TScope.Trojan.VB, probably a variant of Win32.Inject.HIKSRXF, Trojan.Signed, W32.Inject.FIDR.tr. |
| %WINDIR%\TEMP\ATIIIXXVI.EXE | Dangerous |
| %WINDIR%\TEMP\ATIIIXXVI.EXE | High Risk |
ATIIIXXVI.EXE is known as: Trojan.Clicker, Inject.ARKS, Trojan.Inject.fidr, Trojan.Inject.xPDC+5nA7hs, TR.Inject.fidr, Trojan.Inject, Troj.Inject.fi.(kcloud), W32.Trojan.WQWI-1046, TScope.Trojan.VB, probably a variant of Win32.Inject.HIKSRXF, Trojan.Signed, W32.Inject.FIDR.tr.
MD5 of ATIIIXXVI.EXE = 521ba9f041b33f1a1a84641ec7595f7f
ATIIIXXVI.EXE size is 61440 bytes.
Full path on a computer: %WINDIR%\TEMP\ATIIIXXVI.EXE
Related Files:
%Temp%\AccInfo.ini
%Temp%\CCProxy.dll
%Temp%\CCProxy.ini
%Temp%\ctfm00.exe
%Temp%\Language\ChineseGB.ini
%Temp%\Log\Log-2013-07-14.txt
%Temp%\zlib1.dll
%Temp%\~DF451B.tmp
C:\Documents and Settings\NetworkService\Cookies\system@baidu[1].txt
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3PCMMHXU\desktop.ini
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\LUIIOHEM\desktop.ini
%SysDir%\7D1B3883.sys
%SysDir%\cfghw.tmp
%SysDir%\CLEARNLOADIMAGE.sys
%SysDir%\gametohw.exe
%SysDir%\Tenb7fc.exe
%SysDir%\vmb7fc.exe
%SysDir%\xxx.sys
%SysDir%\ztb7fc.exe
%WinDir%\Temp\atiiixxvi.exe
%WinDir%\Temp\clientbar.exe
%WinDir%\Temp\loadalljpg.htm
%WinDir%\Temp\md5.htm
%WinDir%\Temp\minihook.dll
%WinDir%\Temp\srtinfo.log
%WinDir%\Temp\_191968.txt
%WinDir%\cklisten.exe
%WinDir%\KB2536276666.log
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.