BEARD.EXE is Trojan Injector
The file BEARD.EXE is a computer worm.
The worm BEARD.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the BEARD.EXE problem as soon as possible!
Delete the file BEARD.EXE from all infected computers in your network.
Set up your network firewall against BEARD.EXE intervention.
Malware Analysis of BEARD.EXE
Full path on a computer: %Appdata%\beard.exe
Detected by UnHackMe:
BEARD.EXE
Default location: %Appdata%\beard.exe
Removal Results: Success
Number of reboot: 1
BEARD.EXE is known as:
Trojan.Injector, Trojan.Llac, Worm.Ainslot
BEARD.EXE hash:
- MD5: 95ac37fb2798cf621f1d8ee3ed6f6e9d
How to quickly detect BEARD.EXE presence?
Registry:
Files:
Registry:- HKLM\Software\Microsoft\Active Setup\Installed Components\{EBDD63AA-FDCB-BCF4-5BEE-DFF4C9A39E24}\StubPath: “%Appdata%\beard.exe”
- HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Windows: “%Appdata%\beard.exe”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows: “%Appdata%\beard.exe”
- HKCU\Software\Microsoft\Active Setup\Installed Components\{EBDD63AA-FDCB-BCF4-5BEE-DFF4C9A39E24}\StubPath: “%Appdata%\beard.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows: “%Appdata%\beard.exe”
Files:- %Appdata%\beard.exe
- %Appdata%\data.dat
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
