WINCSA.EXE is Trojan Jorik.IRCbo

May 18, 2012 by NightWatcher
Filed under: Malware 
: Solved!

Fix it immediately:

The file WINCSA.EXE is malware related.
You must delete the file WINCSA.EXE immediately!
Delete the file WINCSA.EXE without delay!
Kill the process WINCSA.EXE and remove WINCSA.EXE from the Windows startup.

Malware Analysis of WINCSA.EXE
Full path on a computer: %PROFILE%\P-7-78-8964-9648-3874\WINCSA.EXE

Detected by UnHackMe:

WINCSA.EXE
Default location: %PROFILE%\P-7-78-8964-9648-3874\WINCSA.EXE

Removal Results: Success
Number of reboot: 1

WINCSA.EXE is known as:

Trojan.Jorik.IRCbo

WINCSA.EXE hash:

  • MD5: 5e4588f5b7c07dcf7e8881dc4186623e
How to quickly detect WINCSA.EXE presence?

Files:
  • %PROFILE%\P-7-78-8964-9648-3874\WINCSA.EXE


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Tags: Jorik.IRCbo, Trojan, WINCSA.EXE

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.