Remove %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE malware
%COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE:
%commonprogramfiles%\thunder network\tp\ver1\1.1.2.256_1111\thunderplatform.exe
Full path on a computer: %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE
Autostart registry keys:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE:*:ENABLED:??????"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE: "%COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE:*:ENABLED:THUNDERPLATFORM1.1.2.256"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE: "%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE:*:ENABLED:MINITHUNDERPLATFORM.EXE"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6B7F4D9-8D15-4a48-A722-B54C3D6FCE70}\AppName: "thunderplatform.exe"
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE: 0X00000001
Related Files:
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\DOWNLOAD_ENGINE.DLL
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\ID.DAT
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINIZIP.DLL
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINI_UNZIP_DLL.DLL
The file THUNDERPLATFORM.EXE is a computer worm.
The worm THUNDERPLATFORM.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other
computers.
You must fix the THUNDERPLATFORM.EXE problem as soon as possible!
Delete the file THUNDERPLATFORM.EXE from all infected computers in your network.
Set up your network firewall against THUNDERPLATFORM.EXE intervention.
THUNDERPLATFORM.EXE is related to: Win.Worm.Chir-1396, THUNDERPLATFORM.EXE.
Virustotal = 1/56
MD5 = CA91B9005FBE5455BA107CE9A4E3047C
File Size: 190840
File information:
OriginalFilename: ThunderPlatform.exe
FileDescription: ThunderPlatform????
InternalName: ThunderPlatform
CompanyName: ?????????????
LegalCopyright: ???? (C) 2010
| %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE | Malware |
| %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE | Dangerous |
| %COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE | High Risk |
Autostart registry keys:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE: "%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE:*:ENABLED:??????"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE: "%COMMONPROGRAMFILES%\THUNDER NETWORK\TP\VER1\1.1.2.256_1111\THUNDERPLATFORM.EXE:*:ENABLED:THUNDERPLATFORM1.1.2.256"
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\STANDARDPROFILE\AUTHORIZEDAPPLICATIONS\LIST\%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE: "%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE:*:ENABLED:MINITHUNDERPLATFORM.EXE"
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6B7F4D9-8D15-4a48-A722-B54C3D6FCE70}\AppName: "thunderplatform.exe"
HKCU\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\COMPATIBILITY ASSISTANT\PERSISTED\%PROGRAM FILES%\THUNDER NETWORK\XMP\V5.1.26.4324\TP\THUNDERPLATFORM.EXE: 0X00000001
Related Files:
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\DOWNLOAD_ENGINE.DLL
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\ID.DAT
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINITHUNDERPLATFORM.EXE
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINIZIP.DLL
%APPDATA%\360SE6\APPLICATION\7.1.1.518\DOWNLOAD\MINI_UNZIP_DLL.DLL
The file THUNDERPLATFORM.EXE is a computer worm.
The worm THUNDERPLATFORM.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other
computers.
You must fix the THUNDERPLATFORM.EXE problem as soon as possible!
Delete the file THUNDERPLATFORM.EXE from all infected computers in your network.
Set up your network firewall against THUNDERPLATFORM.EXE intervention.
THUNDERPLATFORM.EXE is related to: Win.Worm.Chir-1396, THUNDERPLATFORM.EXE.
Virustotal = 1/56
MD5 = CA91B9005FBE5455BA107CE9A4E3047C
File Size: 190840
File information:
OriginalFilename: ThunderPlatform.exe
FileDescription: ThunderPlatform????
InternalName: ThunderPlatform
CompanyName: ?????????????
LegalCopyright: ???? (C) 2010
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.