86HUSIJI3W.EXE is Trojan Wigon

March 16, 2012 by NightWatcher
Filed under: Malware 
: Solved!

You should Download Removal Tool here...

Rootkit 86HUSIJI3W.EXE is software that enables continued privileged access to a computer while actively hiding its presence.
Detection and removal of 86HUSIJI3W.EXE may be a very difficult process.
You should use anti-rootkit software to fix the 86HUSIJI3W.EXE problem.

Malware Analysis of 86HUSIJI3W.EXE
Full path on a computer: %Profile%\86husiji3w.exe

Detected by UnHackMe:

Item Name: Regedit32
Author:
Related File: %SysDir%\regedit.exe
Type: Registry Run

Item Name: 86husiji3w
Author: Unknown
Related File: %PROFILE%\86HUSIJI3W.EXE
Type: Registry Run

Item Name: 86husiji3w.exe
Author: Unknown
Related File: %PROFILE%\86HUSIJI3W.EXE
Type: Detected using Heuristic Algorithm

Item Name: Rootkit: NECURS
Author: Unknown
Related File:
Type: Devices in Memory

After first reboot detected by UnHackMe:

Item Name: Regedit32
Author:
Related File: %SysDir%\regedit.exe
Type: Registry Run

Detected by RegRun Warrior:

Item Name: Regedit32
Author:
Related File: %SysDir%\regedit.exe
Type: Registry Run

Item Name: 8f80cb29e9e1a182
Author:
Related File: %SYSDIR%\DRIVERS\8F80CB29E9E1A182.SYS
Type: Drivers

Item Name: 86husiji3w
Author:
Related File: %Profile%\86husiji3w.exe
Type: Registry Run

Removal Results: Success
Number of reboot: 1

86HUSIJI3W.EXE is known as:

Trojan.Wigon, Trojan.Scar

86HUSIJI3W.EXE hash:

  • MD5: 2136f096e70c9081b9284af78456e146
How to quickly detect 86HUSIJI3W.EXE presence?

Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Regedit32: “%SysDir%\regedit.exe”
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\86husiji3w: “%Profile%\86husiji3w.exe”
Files:
  • %Profile%\86husiji3w.exe


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.