SPONSORMATCH.EXE is Trojan Fosniw

April 18, 2012 by NightWatcher
Filed under: Malware 
: Solved!

You should Download Removal Tool here...

We checked up the file SPONSORMATCH.EXE and found it hazardous.
The file SPONSORMATCH.EXE must be deleted from the system immediately.
Kill the process SPONSORMATCH.EXE and remove SPONSORMATCH.EXE from the Windows startup.

Malware Analysis of SPONSORMATCH.EXE
Full path on a computer: %Program Files%sponsormatchsponsormatch.exe

Detected by UnHackMe:

SPONSORMATCH.EXE
Default location: %Program Files%sponsormatchsponsormatch.exe

Removal Results: Success
Number of reboot: 1

SPONSORMATCH.EXE is known as:

Trojan.Fosniw

SPONSORMATCH.EXE hash:

  • MD5: 0ff84f6cbce2f4776b8d5fa68c06d393
The file tries to download information from some web sites.
How to quickly detect SPONSORMATCH.EXE presence?

Registry:
  • HKCUSoftwareMicrosoftWindowsCurrentVersionRunsponsormatch: “%Program Files%sponsormatchsponsormatch.exe”
  • HKCUSoftwareMicrosoftWindowsCurrentVersionRunsponsormatchagent: “%Program Files%sponsormatchsponsormatchagent.exe”
Folders:
  • %Program Files%sponsormatch
Files:
  • %Program Files%sponsormatchsponsormatch.exe
  • %Program Files%sponsormatchsponsormatchagent.exe
  • %Program Files%sponsormatchsponsormatch_uninstall.exe


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.