Remove %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE malware
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE:
%common appdata%\thunder network\kankan\pusher\xmptipwnd.1.0.0.85.exe
Full path on a computer: %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE
Autostart registry keys:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE: "%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE:*:ENABLED:XMPTIPWND"
Related Files:
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XLUE.1.7.0.604\ZLIB1.DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\REGHELPER\XAPPEX.1.1.1.85.(462).DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\REGHELPER\{4562B511-62E9-4533-B7B2-56A8BB10B482}.HISTORY
The file XMPTIPWND.1.0.0.85.EXE is malware related.
You must delete the file XMPTIPWND.1.0.0.85.EXE immediately!
Delete the file XMPTIPWND.1.0.0.85.EXE without delay!
Kill the process XMPTIPWND.1.0.0.85.EXE and remove XMPTIPWND.1.0.0.85.EXE from the Windows startup.
XMPTIPWND.1.0.0.85.EXE is related to: W32.Application.Thundern!c, XMPTIPWND.1.0.0.85.EXE.
Virustotal = 2/54
MD5 = ABB97CE86AC7A3BBB5BEA21FAA954815
File Size: 111896
File information:
OriginalFilename: XmpTipWnd.exe
FileDescription: Xunlei Application
InternalName: XmpTipWnd
CompanyName: ?????????????
LegalCopyright: Copyright (c) 2003-2014 ?????????????
| %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE | Malware |
| %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE | Dangerous |
| %COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE | High Risk |
Autostart registry keys:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE: "%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE:*:ENABLED:XMPTIPWND"
Related Files:
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XLUE.1.7.0.604\ZLIB1.DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\PUSHER\XMPTIPWND.1.0.0.85.EXE
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\REGHELPER\XAPPEX.1.1.1.85.(462).DLL
%COMMON APPDATA%\THUNDER NETWORK\KANKAN\REGHELPER\{4562B511-62E9-4533-B7B2-56A8BB10B482}.HISTORY
The file XMPTIPWND.1.0.0.85.EXE is malware related.
You must delete the file XMPTIPWND.1.0.0.85.EXE immediately!
Delete the file XMPTIPWND.1.0.0.85.EXE without delay!
Kill the process XMPTIPWND.1.0.0.85.EXE and remove XMPTIPWND.1.0.0.85.EXE from the Windows startup.
XMPTIPWND.1.0.0.85.EXE is related to: W32.Application.Thundern!c, XMPTIPWND.1.0.0.85.EXE.
Virustotal = 2/54
MD5 = ABB97CE86AC7A3BBB5BEA21FAA954815
File Size: 111896
File information:
OriginalFilename: XmpTipWnd.exe
FileDescription: Xunlei Application
InternalName: XmpTipWnd
CompanyName: ?????????????
LegalCopyright: Copyright (c) 2003-2014 ?????????????
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.