WINRSDRV32.EXE is Trojan Yimfoca

July 13, 2012 by NightWatcher
Filed under: Malware 
: Solved!

Fix it immediately:

The file WINRSDRV32.EXE is malware related.
You must delete the file WINRSDRV32.EXE immediately!
Delete the file WINRSDRV32.EXE without delay!
Kill the process WINRSDRV32.EXE and remove WINRSDRV32.EXE from the Windows startup.

Malware Analysis of WINRSDRV32.EXE
Full path on a computer: %SysDir%\winrsdrv32.exe

Detected by UnHackMe:

WINRSDRV32.EXE
Default location: %SysDir%\winrsdrv32.exe

Removal Results: Success
Number of reboot: 1

WINRSDRV32.EXE is known as:

Trojan.Yimfoca, Worm.Phorpiex

WINRSDRV32.EXE hash:

  • MD5: 1dc14ec42253c4beb399655887e596e0
How to quickly detect WINRSDRV32.EXE presence?

Files:
  • %SysDir%\winrsdrv32.exe


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Tags: Trojan, WINRSDRV32.EXE, Yimfoca

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.