INSVXWPCO.EXE is Backdoor PcClient
The program INSVXWPCO.EXE is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with INSVXWPCO.EXE.
Download for free: http://www.unhackme.com
Malware Analysis of INSVXWPCO.EXE
Full path on a computer: %SysDir%\insvxwpco.exe
Detected by UnHackMe:
Item Name: {ybzlzcnm-pmas-zgxw-bedx-rhzkhqhzzigr}
Author: Microsoft Corporation
Related File: %SYSDIR%\INSVXWPCO.EXE
Type: ActiveSetup
Removal Results: Success
Number of reboot: 1
INSVXWPCO.EXE is known as:
Backdoor.PcClient
INSVXWPCO.EXE hash:
- MD5: f65f81932e7d35666a8eed19946ae687
The file tries to download information from some web sites.
How to quickly detect INSVXWPCO.EXE presence?
Registry:
Files:
Registry:- HKLM\Software\Microsoft\Active Setup\Installed Components\{ybzlzcnm-pmas-zgxw-bedx-rhzkhqhzzigr}\stubpath: “%SysDir%\insvxwpco.exe”
- HKLM\System\CurrentControlSet\Services\PCRatStact\Type: 0×00000120
Files:- %Temp%\32406_lang.dll
- %Temp%\53156_lang.dll
- %SysDir%\insvxwpco.exe
- %SysDir%\insvxwpco.exe_lang.ini
- %SysDir%\syslog.dat
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
