SIS.EXE - Dangerous
%TEMP%\SIS.EXE
Manual removal instructions:
Antivirus Report of %TEMP%\SIS.EXE:
%temp%\sis.exe
We suggest you to remove SIS.EXE from your computer as soon as possible.
SIS.EXE is known as: Backdoor.Trojan [Symantec] Backdoor.Win32.Turkojan.il [Kaspersky Lab] BackDoor-CZP.dr [McAfee] Backdoor:Win32/Turkojan.AI [Microsoft] Backdoor.Win32.Turkojan [Ikarus] Win-Trojan/Turkojan.276992 [AhnLab] packed with UPX [Kaspersky Lab].
MD5 of SIS.EXE = 2DE85BC7579D54389C81B263D2543F13
SIS.EXE size is 112128 bytes.
Full path on a computer: %TEMP%\SIS.EXE
Related Files:
C:\AUTOLOAD.EXE
C:\AUTORUN.INF
%COMMONPROGRAMS%\TURKOJAN\TURKOJAN 4.0.LNK
%COMMONPROGRAMS%\TURKOJAN\UNINSTALL TURKOJAN 4.0.LNK
%COMMONPROGRAMS%\TURKOJAN\WEB SITE.URL
%DESKTOPDIR%\TURKOJAN 4.0.LNK
%TEMP%\CMSETAC.DLL
%PROGRAMFILES%\BIFROST\123DZ
%TEMP%\IS-OFTON.TMP\TURKOJAN4.TMP
%TEMP%\IS-R1I1P.TMP\_ISETUP\_REGDLL.TMP
%TEMP%\IS-R1I1P.TMP\_ISETUP\_SHFOLDR.DLL
%TEMP%\NTDTCSTP.DLL
%TEMP%\[FILENAME OF THE SAMPLE #1]
%TEMP%\SIS.EXE
%TEMP%\TURKOJAN4.EXE
%PROGRAMFILES%\TURKOJAN\CLIENT.EXE
%PROGRAMFILES%\TURKOJAN\ENGLISH.LNG
%PROGRAMFILES%\TURKOJAN\GERMAN.LNG
%PROGRAMFILES%\TURKOJAN\MESAJ.DAT
%PROGRAMFILES%\TURKOJAN\PORTUGUESE.LNG
%PROGRAMFILES%\TURKOJAN\SPANISH.LNG
%PROGRAMFILES%\TURKOJAN\TURKCE.LNG
%PROGRAMFILES%\TURKOJAN\TWMSICO.DLL
%PROGRAMFILES%\TURKOJAN\UNINS000.DAT
%PROGRAMFILES%\TURKOJAN\UNINS000.EXE
C:\SHELL.EXE
%WINDIR%\KB8888239.LOG
| %TEMP%\SIS.EXE | Backdoor.Trojan [Symantec] Backdoor.Win32.Turkojan.il [Kaspersky Lab] BackDoor-CZP.dr [McAfee] Backdoor:Win32/Turkojan.AI [Microsoft] Backdoor.Win32.Turkojan [Ikarus] Win-Trojan/Turkojan.276992 [AhnLab] packed with UPX [Kaspersky Lab]. |
| %TEMP%\SIS.EXE | Dangerous |
| %TEMP%\SIS.EXE | High Risk |
SIS.EXE is known as: Backdoor.Trojan [Symantec] Backdoor.Win32.Turkojan.il [Kaspersky Lab] BackDoor-CZP.dr [McAfee] Backdoor:Win32/Turkojan.AI [Microsoft] Backdoor.Win32.Turkojan [Ikarus] Win-Trojan/Turkojan.276992 [AhnLab] packed with UPX [Kaspersky Lab].
MD5 of SIS.EXE = 2DE85BC7579D54389C81B263D2543F13
SIS.EXE size is 112128 bytes.
Full path on a computer: %TEMP%\SIS.EXE
Related Files:
C:\AUTOLOAD.EXE
C:\AUTORUN.INF
%COMMONPROGRAMS%\TURKOJAN\TURKOJAN 4.0.LNK
%COMMONPROGRAMS%\TURKOJAN\UNINSTALL TURKOJAN 4.0.LNK
%COMMONPROGRAMS%\TURKOJAN\WEB SITE.URL
%DESKTOPDIR%\TURKOJAN 4.0.LNK
%TEMP%\CMSETAC.DLL
%PROGRAMFILES%\BIFROST\123DZ
%TEMP%\IS-OFTON.TMP\TURKOJAN4.TMP
%TEMP%\IS-R1I1P.TMP\_ISETUP\_REGDLL.TMP
%TEMP%\IS-R1I1P.TMP\_ISETUP\_SHFOLDR.DLL
%TEMP%\NTDTCSTP.DLL
%TEMP%\[FILENAME OF THE SAMPLE #1]
%TEMP%\SIS.EXE
%TEMP%\TURKOJAN4.EXE
%PROGRAMFILES%\TURKOJAN\CLIENT.EXE
%PROGRAMFILES%\TURKOJAN\ENGLISH.LNG
%PROGRAMFILES%\TURKOJAN\GERMAN.LNG
%PROGRAMFILES%\TURKOJAN\MESAJ.DAT
%PROGRAMFILES%\TURKOJAN\PORTUGUESE.LNG
%PROGRAMFILES%\TURKOJAN\SPANISH.LNG
%PROGRAMFILES%\TURKOJAN\TURKCE.LNG
%PROGRAMFILES%\TURKOJAN\TWMSICO.DLL
%PROGRAMFILES%\TURKOJAN\UNINS000.DAT
%PROGRAMFILES%\TURKOJAN\UNINS000.EXE
C:\SHELL.EXE
%WINDIR%\KB8888239.LOG
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.