Remove %LOCAL APPDATA%\ABR.EXE malware
%LOCAL APPDATA%\ABR.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of %LOCAL APPDATA%\ABR.EXE:
%local appdata%\abr.exe
Full path on a computer: %LOCAL APPDATA%\ABR.EXE
Autostart registry keys:
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\MOZILLA FIREFOX\FIREFOX.EXE""
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\SAFEMODE\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\MOZILLA FIREFOX\FIREFOX.EXE" -SAFE-MODE"
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\INTERNET EXPLORER\IEXPLORE.EXE""
Related Files:
%LOCAL APPDATA%\4S88UJ10754D4N7VO4
%LOCAL APPDATA%\ABR.EXE
%TEMP%\4S88UJ10754D4N7VO4
%PROFILE%\TEMPLATES\4S88UJ10754D4N7VO4
%COMMON APPDATA%\4S88UJ10754D4N7VO4
ABR.EXE is High Risk Trojan.
ABR.EXE must be removed immediately!
It can used for stealing bank information and users passwords.
ABR.EXE can download malicious software from hacker's web sites.
ABR.EXE allow someone to connect to your computer remotely.
ABR.EXE is related to: Trojan.Win32.Menti, ABR.EXE.
Virustotal = 22/40
MD5 = BFF5B1DAC978B0D7CA0E4D7BD8905775
File Size: 348160
File information:
OriginalFilename: WinFXDocObj.exe
FileDescription: WinFX Runtime Components
InternalName: WinFXDocObj.exe
CompanyName: Microsoft Corporation
FileVersion: 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
LegalCopyright: c Microsoft Corporation. All rights reserved.
| %LOCAL APPDATA%\ABR.EXE | Malware |
| %LOCAL APPDATA%\ABR.EXE | Dangerous |
| %LOCAL APPDATA%\ABR.EXE | High Risk |
Autostart registry keys:
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\OPEN\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\MOZILLA FIREFOX\FIREFOX.EXE""
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\FIREFOX.EXE\SHELL\SAFEMODE\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\MOZILLA FIREFOX\FIREFOX.EXE" -SAFE-MODE"
HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND\: ""%LOCAL APPDATA%\ABR.EXE" -A "%PROGRAM FILES%\INTERNET EXPLORER\IEXPLORE.EXE""
Related Files:
%LOCAL APPDATA%\4S88UJ10754D4N7VO4
%LOCAL APPDATA%\ABR.EXE
%TEMP%\4S88UJ10754D4N7VO4
%PROFILE%\TEMPLATES\4S88UJ10754D4N7VO4
%COMMON APPDATA%\4S88UJ10754D4N7VO4
ABR.EXE is High Risk Trojan.
ABR.EXE must be removed immediately!
It can used for stealing bank information and users passwords.
ABR.EXE can download malicious software from hacker's web sites.
ABR.EXE allow someone to connect to your computer remotely.
ABR.EXE is related to: Trojan.Win32.Menti, ABR.EXE.
Virustotal = 22/40
MD5 = BFF5B1DAC978B0D7CA0E4D7BD8905775
File Size: 348160
File information:
OriginalFilename: WinFXDocObj.exe
FileDescription: WinFX Runtime Components
InternalName: WinFXDocObj.exe
CompanyName: Microsoft Corporation
FileVersion: 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
LegalCopyright: c Microsoft Corporation. All rights reserved.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.