EXPLORER_NEW.EXE is Trojan Ransom.PornoAsset
Ransom Screen Locker EXPLORER_NEW.EXE is a malicious program. EXPLORER_NEW.EXE blocks user access to a computer that it infects. EXPLORER_NEW.EXE demands a ransom paid for unlocking the computer.
Malware Analysis of EXPLORER_NEW.EXE
Full path on a computer: %Windir%\explorer_new.exe
Detected by UnHackMe:
EXPLORER_NEW.EXE
Default location: %Windir%\explorer_new.exe
Removal Results: Success
Number of reboot: 1
EXPLORER_NEW.EXE is known as:
Trojan.Ransom.PornoAsset, Trojan.Smoaler, Trojan.Winlock
EXPLORER_NEW.EXE hash:
- MD5: 1303adf0a0aa3ff3b4a7c818c452853c
How to quickly detect EXPLORER_NEW.EXE presence?
Registry:
Files:
Registry:- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vbyvyqgbjtgmawd = “%CommonAppData%\cwyjxalbhwqigzjzekol.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\vbyvyqgbjtgmawd: “%CommonAppData%\cwyjxalbhwqigzjzekol.exe”
Files:- %CommonAppData%\cwyjxalbhwqigzjzekol.exe
- %Windir%\cwyjxalbhwqigzjzekol.exe
- %Windir%\explorer_new.exe
- %CommonAppData%\nrzzykqumytobemlvxvduhfkteooqkgx
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
