PLUGIN02.EXE is Trojan Scar
The file PLUGIN02.EXE is malware related. You must delete the file PLUGIN02.EXE immediately! Delete the file PLUGIN02.EXE without delay! Kill the process PLUGIN02.EXE and remove PLUGIN02.EXE from the Windows startup. Malware Analysis of PLUGIN02.EXE Full path on a computer: %WinDir%\plugin02.exe Detected by UnHackMe: Item Name: Author: Unknown Related File: %WinDir%\DISKETE.EXE Type: Registry Run Item Name: [...]
GRAPHICSINTEL.EXE is Trojan Scar
We checked up the file GRAPHICSINTEL.EXE and found it hazardous. The file GRAPHICSINTEL.EXE must be deleted from the system immediately. Kill the process GRAPHICSINTEL.EXE and remove GRAPHICSINTEL.EXE from the Windows startup. Malware Analysis of GRAPHICSINTEL.EXE Full path on a computer: %Local Appdata%\GraphicsIntel\GraphicsIntel.exe Detected by UnHackMe: Item Name: GraphicsIntel.exe Author: Graphics-inter Related File: %LOCAL APPDATA%\GRAPHICSINTEL\GRAPHICSINTEL.EXE Type: [...]
K1B2YH1SG2.EXE is Trojan Scar
We checked some samples of K1B2YH1SG2.EXE and detected the file K1B2YH1SG2.EXE as threat. Remove the K1B2YH1SG2.EXE file from your computer right now. Removal tool: http://www.unhackme.com Malware Analysis of K1B2YH1SG2.EXE Full path on a computer: %Profile%\k1b2yh1sg2.exe Detected by UnHackMe: Item Name: k1b2yh1sg2 Author: Unknown Related File: %PROFILE%\K1B2YH1SG2.EXE Type: Registry Run Item Name: k1b2yh1sg2.exe Author: Unknown Related [...]
TAM-VIAGENS.EXE is Trojan Scar
Is the file TAM-VIAGENS.EXE located on your computer? Then your computer is infected. We do suggest you should remove TAM-VIAGENS.EXE from your computer as soon as possible. TAM-VIAGENS.EXE is Trojan/Backdoor. Kill the process TAM-VIAGENS.EXE and remove TAM-VIAGENS.EXE from the Windows startup. Malware Analysis of TAM-VIAGENS.EXE Full path on a computer: %Appdata%\TAM-Viagens.exe Detected by UnHackMe: TAM-VIAGENS.EXE [...]
MSCS.EXE – trojan Scar
Is the file MSCS.EXE located on your computer? Then your computer is infected. We do suggest you should remove MSCS.EXE from your computer as soon as possible. MSCS.EXE is Trojan/Backdoor. Kill the process MSCS.EXE and remove MSCS.EXE from the Windows startup. Malware Analysis of “MSCS.EXE” Executed: sdc06286.exe Removed: mscs.exe. Full path: %Program Files Common%\mscs.exe Detected [...]
vac.exe – trojan Scar
The file vac.exe is malware related. You must delete the file vac.exe immediately! Delete the file vac.exe without delay! Kill the process vac.exe and remove vac.exe from the Windows startup. Malware Analysis of “vac.exe”” Executed: vac.exe Removed: vac.exe. Full path: C:\Documents and Settings\Administrator\Local Settings\Temp\vac.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Windows Update Author: Related File: [...]
msnmsg32.exe – trojan Scar
The file msnmsg32.exe is identified as the Trojan Program that is used for stealing bank information and users passwords. To delete msnmsg32.exe we suggest you should use UnHackMe: http://www.unhackme.com Malware Analysis of “Mobile Device Service” Executed: jun16.exe Removed: msnmsg32.exe. Full path: C:\Documents and Settings\Administrator\Application Data\J-93219-1923-12901\msnmsg32.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Mobile Device Service Author: [...]
v3avie0.dll – trojan Scar
The file v3avie0.dll is identified as the Trojan Program that is used for stealing bank information and users passwords. To delete v3avie0.dll we suggest you should use UnHackMe: http://www.unhackme.com Malware Analysis of v3avie0.dll Executed: 0i86rk.exe Removed: v3avie0.dll. Full path: C:\WINDOWS\system32\v3avie0.dll —————————————————————————————————————————- How to quickly detect malware presence? Files: C:\WINDOWS\system32\cyban.exe C:\WINDOWS\system32\cyban0.dll C:\WINDOWS\system32\ieban0.dll C:\WINDOWS\system32\v3avast.exe C:\WINDOWS\system32\v3avie0.dll C:\WINDOWS\system32\v3avmn0.dll C:\WINDOWS\system32\wuaucldt.exe [...]
SystemNT.exe – trojan Scar
The file SystemNT.exe is malware related. You must delete the file SystemNT.exe immediately! Delete the file SystemNT.exe without delay! Kill the process SystemNT.exe and remove SystemNT.exe from Windows startup. Malware Analysis of SystemNT.exe Executed: f.exe Removed: SystemNT.exe. Full path: C:\Documents and Settings\Administrator\Application Data\SystemNT.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: SystemNT Author: Unknown Related File: C:\DOCUMENTS [...]
win_32.exe – trojan Scar
The file win_32.exe is malware related. You must delete the file win_32.exe immediately! Delete the file win_32.exe without delay! Kill the process win_32.exe and remove win_32.exe from Windows startup. Malware Analysis of win_32.exe Executed: Amor_parati.swf Removed: win_32.exe. Full path: C:\WINDOWS\win_32.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: scssrr.exe Author: Microsoft Related File: C:\WINDOWS\WIN_32.EXE Type: Registry Run [...]
twunk.exe – trojan Scar
The file twunk.exe is identified as the Trojan Program that is used for stealing bank information and users passwords. To delete twunk.exe we recommend you to use UnHackMe: http://www.unhackme.com Malware Analysis of twunk.exe Executed: Extrato_Pedencias_Serasa.exe Removed: twunk.exe. Full path: C:\Program Files\Common Files\twunk.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: twunk Author: Unknown Related File: C:\PROGRAM FILES\COMMON [...]
Removed: C:\Program Files\Internet Explorer\MDM.exe (trojan Scar)
Malware: MDM.exe Removed: C:\Program Files\Internet Explorer\MDM.exe —————————————————————————————————————————- Detected manually: MDM.EXE Default location: C:\PROGRAM FILES\INTERNET EXPLORER\MDM.EXE MD5: CA05CDE90BB408E60064B9D9B6FDDCA3 SHA1: 3C877F1E EC10BFE5 96D56F96 627026DF 6F11F414 File Size: 135 168 Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\MDM Value: “”C:\Program Files\Internet Explorer\MDM.exe” init” Files: C:\Program Files\Internet Explorer\MDM.exe —————————————————————————————————————————- Classification: Antivirus [...]
Removed: C:\Documents and Settings\Administrator\Application Data\e17ef422-72d0-4843-9f36-93d1c74df894_46.avi (trojan Scar)
Malware: l_acc0042.1280338767.exe Removed: C:\Documents and Settings\Administrator\Application Data\e17ef422-72d0-4843-9f36-93d1c74df894_46.avi —————————————————————————————————————————- Detected by UnHackMe: Item Name: e17ef422-72d0-4843-9f36-93d1c74df894_46 Author: Unknown Related File: C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\E17EF422-72D0-4843-9F36-93D1C74DF894_46.AVI Type: Registry Run Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\e17ef422-72d0-4843-9f36-93d1c74df894_46 – random key name Value: “rundll32.exe “C:\Documents and Settings\Administrator\Application Data\e17ef422-72d0-4843-9f36-93d1c74df894_46.avi”, start” – random file [...]
Removed: C:\WINDOWS\system32\iickie.exe (trojan Scar)
Malware: C:\sand-box\Server.exe Removed: C:\WINDOWS\system32\iickie.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: SafePrecgdxf Author: Related File: C:\WINDOWS\system32\iickie.exe Type: Auto Services Item Name: iickie.exe Author: Unknown Related File: C:\WINDOWS\SYSTEM32\IICKIE.EXE Type: Running Processes Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKLM\System\CurrentControlSet\Services\SafePrecgdxf\ImagePath Value: “C:\WINDOWS\system32\iickie.exe” Registry: HKLM\System\CurrentControlSet\Services\SafePrecgdxf\DisplayName Value: “Computer Safe grf Instruments Domain [...]
Removed: C:\Documents and Settings\Administrator\ntl.dll, C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\scand.dll (trojan Scar)
Malware: C:\sand-box\ckg3.exe Removed: C:\Documents and Settings\Administrator\ntl.dll C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\scand.dll —————————————————————————————————————————- Detected by UnHackMe: Item Name: note Author: Unknown Related File: C:\DOCUME~1\ADMINI~1\NTL.DLL Type: Registry Run Item Name: scand.dll Author: Unknown Related File: C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\START MENU\PROGRAMS\STARTUP\SCAND.DLL Type: Startup Folder Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\note [...]
Removed: C:\WINDOWS\system32\wbem\360tray.exe (trojan Scar)
Malware: h.exe Removed: C:\WINDOWS\system32\wbem\360tray.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: UserInit Author: Unknown Related File: C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wbem\360tray.exe Type: UserInit Value Item Name: 360tray.exe Author: Related File: C:\WINDOWS\SYSTEM32\WBEM\360TRAY.EXE Type: Running Processes Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit Value: “C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wbem\360tray.exe” Files: C:\WINDOWS\system32\wbem\360tray.exe —————————————————————————————————————————- Classification: Antivirus Version Last [...]
Removed: C:\WINDOWS\help\dbs7154 (HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Avast – trojan Scar)
Malware: foto2.jpg.exe Removed: C:\WINDOWS\help\dbs7154 —————————————————————————————————————————- Detected by UnHackMe: Item Name: Avast Author: Developement Related File: C:\WINDOWS\HELP\MLB711.EXE Type: Registry Run Item Name: dbs7154.exe Author: Developement Related File: C:\WINDOWS\HELP\DBS7154.EXE Type: Running Processes Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- How to quickly detect malware presence? Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Avast Value: “C:\WINDOWS\help\[dbs7154 - 3 letters + 4 numbers - [...]
Removed: C:\WINDOWS\system32\Storm2.exe (trojan Scar)
Malware: C:\sand-box\player.exe Removed: C:\WINDOWS\system32\Storm2.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: .txt Author: Unknown Related File: d:\Browsers.exe %1 Type: Main File Extensions Item Name: UserInit Author: Unknown Related File: C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\Storm2.exe Type: UserInit Value Item Name: WBOpen Author: Related File: C:\WINDOWS\SYSTEM32\STORM2.EXE Type: Registry Run Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- Classification: Antivirus Version Last Update [...]
Removed: ..\Temp\servicio.exe (trojan Scar)
Malware: FOTO5122MGS-PC.jpg.exe Removed: C:\Documents and Settings\Administrator\Local Settings\Temp\servicio.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: Windows Services Author: Related File: servicio.exe Type: Registry Run Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- Classification: Antivirus Version Last Update Result F-Secure 9.0.15370.0 2010.04.27 – Kaspersky 7.0.0.125 2010.04.27 Trojan.Win32.Scar.bxlb Microsoft 1.5703 2010.04.27 VirTool:Win32/VBInject.gen!AN NOD32 5065 2010.04.27 Win32/Kryptik.FAV.Gen —————————————————————————————————————————- Additional information [...]
Removed: %WinDir%\winlogon.exe (trojan Scar)
Malware: c:\sand-box\server.exe Removed: C:\WINDOWS\winlogon.exe —————————————————————————————————————————- Detected by UnHackMe: Item Name: {B5BB5C54-E895-1BAD-DEAA-CAEAEF1EA2E2} Author: Microsoft Related File: C:\WINDOWS\WINLOGON.EXE Type: ActiveSetup Item Name: Winlogon Author: Related File: C:\WINDOWS\WINLOGON.EXE Type: Registry Run Item Name: winlogon.exe Author: Related File: C:\WINDOWS\WINLOGON.EXE Type: Running Processes Removal Results: Success Number of reboot: 1 —————————————————————————————————————————- Classification: Antivirus Version Last Update Result F-Secure 9.0.15370.0 2010.04.22 [...]
- Remember: the best way to remove rootkits is from the outside!
