VIPSULIMQORS.EXE is Trojan Cutwail
We checked up the file VIPSULIMQORS.EXE and found it hazardous.
The file VIPSULIMQORS.EXE must be deleted from the system immediately.
Kill the process VIPSULIMQORS.EXE and remove VIPSULIMQORS.EXE from the Windows startup.
Malware Analysis of VIPSULIMQORS.EXE
Full path on a computer: %Profile%\vipsulimqors.exe
Detected by UnHackMe:
VIPSULIMQORS.EXE
Default location: %Profile%\vipsulimqors.exe
Removal Results: Success
Number of reboot: 1
VIPSULIMQORS.EXE is known as:
Trojan.Cutwail
VIPSULIMQORS.EXE hash:
- MD5: 195348c452e5d64a4730444bf914f364
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect VIPSULIMQORS.EXE presence?
Registry:
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Regedit32: “%SysDir%\regedit.exe”
- HKLM\System\CurrentControlSet\Services\f3db640c4e3c3a9d\ImagePath: “\SystemRoot\System32\Drivers\f3db640c4e3c3a9d.sys”
- HKLM\System\CurrentControlSet\Services\f3db640c4e3c3a9d\Group: “Boot Bus Extender”
- HKLM\System\CurrentControlSet\Services\f3db640c4e3c3a9d\DisplayName: “vipsulimqors.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\vipsulimqors: “%Profile%\vipsulimqors.exe”
Files:- %Profile%\vipsulimqors.exe
- %SysDir%\drivers\f3db640c4e3c3a9d.sys
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
