CASCMD.EXE is Trojan Siggen4

June 27, 2012 by NightWatcher
Filed under: Malware 
: Solved!

Fix it immediately:

The file CASCMD.EXE is identified as a virus dropper.
The dropper CASCMD.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file CASCMD.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the CASCMD.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the CASCMD.EXE process and delete the file CASCMD.EXE.

Malware Analysis of CASCMD.EXE
Full path on a computer: %SYSDIR%\CASCMD.EXE

Detected by UnHackMe:

CASCMD.EXE
Default location: %SYSDIR%\CASCMD.EXE

Removal Results: Success
Number of reboot: 1

CASCMD.EXE is known as:

Trojan.Siggen4

CASCMD.EXE hash:

  • MD5: afb43c52a67d3d6f5318da44821794dd
How to quickly detect CASCMD.EXE presence?

Files:
  • %TEMP%\AUT4.TMP
  • %SYSDIR%\DT.EXE
  • %SYSDIR%\CASCMD.EXE
  • %SYSDIR%\CASINFO.EXE

  • Recommended: UnHackMe anti-rootkit and anti-malware

    Premium software: RegRun Security Suite (Good choice for removal and protection)

    Written by

    Malware Hunter.

    Comments

    Tell me what you're thinking...
    and oh, if you want a pic to show with your comment, go get a gravatar!

    You must be logged in to post a comment.