DPLAYSVR.EXE is Trojan Menti
Rootkit DPLAYSVR.EXE is software that enables continued privileged access to a computer while actively hiding its presence.
Detection and removal of DPLAYSVR.EXE may be a very difficult process.
You should use anti-rootkit software to fix the DPLAYSVR.EXE problem.
Malware Analysis of DPLAYSVR.EXE
Full path on a computer: %Appdata%\dplaysvr.exe
Detected by UnHackMe:
Item Name: 87.229.126.44 www.google.com
Author: Unknown
Related File:
Type: Hosts File Contents
Item Name: 87.229.126.45 www.bing.com
Author: Unknown
Related File:
Type: Hosts File Contents
After first reboot detected by UnHackMe:
Item Name: dplaysvr
Author: Unknown
Related File: %APPDATA%\DPLAYSVR.EXE
Type: Registry Run
Item Name: dplaysvr.exe
Author: Unknown
Related File: %APPDATA%\DPLAYSVR.EXE
Type: Detected using Heuristic Algorithm
Item Name: dplayx.dll
Author: Unknown
Related File: %APPDATA%\DPLAYX.DLL
Type: Detected using Heuristic Algorithm
Removal Results: Success
Number of reboot: 1
DPLAYSVR.EXE is known as:
Trojan.Menti
DPLAYSVR.EXE hash:
- MD5: 8f57aae1b252f6ac2b96985c2bcc8c5b
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\dplaysvr: “%Appdata%\dplaysvr.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\dplaysvr: “%Appdata%\dplaysvr.exe”
Files:- %Appdata%\dplaysvr.exe
- %Appdata%\dplayx.dll
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
