SHOPATHOMEWATCHER.EXE is Trojan AVKill

November 16, 2012 by NightWatcher
Filed under: Malware 
: Solved!

You should Download Removal Tool here...

The file SHOPATHOMEWATCHER.EXE is identified as a virus dropper.
The dropper SHOPATHOMEWATCHER.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file SHOPATHOMEWATCHER.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the SHOPATHOMEWATCHER.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the SHOPATHOMEWATCHER.EXE process and delete the file SHOPATHOMEWATCHER.EXE.

Malware Analysis of SHOPATHOMEWATCHER.EXE
Full path on a computer: %APPDATA%\SHOPATHOME\SHOPATHOMEHELPER\SHOPATHOMEWATCHER.EXE

Detected by UnHackMe:

SHOPATHOMEWATCHER.EXE
Default location: %APPDATA%\SHOPATHOME\SHOPATHOMEHELPER\SHOPATHOMEWATCHER.EXE

Removal Results: Success
Number of reboot: 1

SHOPATHOMEWATCHER.EXE is known as:

Trojan AVKill

How to quickly detect SHOPATHOMEWATCHER.EXE presence?

Files:
  • %APPDATA%\SHOPATHOME\TEMP\{311B58DC-A4DC-4B04-B1B5-60299AD3D803}\CLEARHIST.EXE
  • %TEMP%\NSQ3.TMP\XML.DLL
  • %ALLUSERSPROFILE%\START MENU\PROGRAMS\SHOPATHOME.COM TOOLBAR\SHOPATHOME.COM UNINSTALL.LNK
  • %APPDATA%\SHOPATHOME\TEMP\{311B58DC-A4DC-4B04-B1B5-60299AD3D803}\IE8GUARDWORKAROUND.EXE
  • %APPDATA%\SHOPATHOME\SHOPATHOMEHELPER\SHOPATHOMEWATCHER.EXE


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.