Remove HAYZUMFLEX.EXE malware
HAYZUMFLEX.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of HAYZUMFLEX.EXE:
hayzumflex.exe
Full path on a computer: %COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.EXE
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hayzumflex.exe
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hayzumflex.exe\GlobalFlag: 0x00000200
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe\IgnoreSelfExits: 0x00000001
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\HAYZUMFLEX.EXE\MONITORPROCESS: "%COMMON APPDATA%\WINDOWS MONITOR\MONITOR.EXE %I DEVICEID=1BED8369-5481-99B3-CBE2-0AEF52719B95 CHANNELID=3 DISTRIBUTER=APSFL2APPS PROCESSNAME=HAYZUMFLEX.EXE STATSADDRESS=HTTP://STATS.HKIJNGY.ME/STATISTICSSERVICE.SVC/V1/JSON/LOGEVENT"
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe\ReportingMode: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HAYZUMFLEX\IMAGEPATH: "%COMMON APPDATA%\\HAYZUMFLEX\\HAYZUMFLEX.EXE SHUZ -F "%COMMON APPDATA%\\HAYZUMFLEX\\HAYZUMFLEX.DAT" -L -A"
Related Files:
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.D.DAT
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.DAT
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.EXE
%COMMON APPDATA%\HAYZUMFLEX\ISING.BIN
%COMMON APPDATA%\HAYZUMFLEX\KONKTANSTOCK.BIN
The file HAYZUMFLEX.EXE is malware related.
You must delete the file HAYZUMFLEX.EXE immediately!
HAYZUMFLEX.EXE is related to: GenericRXAW-HD!F908630AD792, HAYZUMFLEX.EXE.
Virustotal = 34/57
MD5 = F908630AD7927243A6964F0462370EBA
File Size: 983040
| HAYZUMFLEX.EXE | Malware |
| HAYZUMFLEX.EXE | Dangerous |
| HAYZUMFLEX.EXE | High Risk |
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hayzumflex.exe
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Hayzumflex.exe\GlobalFlag: 0x00000200
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe\IgnoreSelfExits: 0x00000001
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\HAYZUMFLEX.EXE\MONITORPROCESS: "%COMMON APPDATA%\WINDOWS MONITOR\MONITOR.EXE %I DEVICEID=1BED8369-5481-99B3-CBE2-0AEF52719B95 CHANNELID=3 DISTRIBUTER=APSFL2APPS PROCESSNAME=HAYZUMFLEX.EXE STATSADDRESS=HTTP://STATS.HKIJNGY.ME/STATISTICSSERVICE.SVC/V1/JSON/LOGEVENT"
HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\SilentProcessExit\Hayzumflex.exe\ReportingMode: 0x00000001
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HAYZUMFLEX\IMAGEPATH: "%COMMON APPDATA%\\HAYZUMFLEX\\HAYZUMFLEX.EXE SHUZ -F "%COMMON APPDATA%\\HAYZUMFLEX\\HAYZUMFLEX.DAT" -L -A"
Related Files:
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.D.DAT
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.DAT
%COMMON APPDATA%\HAYZUMFLEX\HAYZUMFLEX.EXE
%COMMON APPDATA%\HAYZUMFLEX\ISING.BIN
%COMMON APPDATA%\HAYZUMFLEX\KONKTANSTOCK.BIN
The file HAYZUMFLEX.EXE is malware related.
You must delete the file HAYZUMFLEX.EXE immediately!
- Uninstall HAYZUMFLEX.EXE using Windows uninstallation applet (use Add/Remove Programs or Uninstall Program or Apps & features).
- Open Task Manager and terminate "HAYZUMFLEX.EXE" processes.
- Use Windows search to find and remove "HAYZUMFLEX.EXE" files and folders.
- Run services.msc and disable a "HAYZUMFLEX.EXE" Windows service.
- Execute taskschd.msc to get rid of "HAYZUMFLEX.EXE" scheduled tasks.
- Open regedit.exe and delete HAYZUMFLEX.EXE registry keys and values.
- Inspect the properties of your desktop and Start menu shortcuts for HAYZUMFLEX.EXE presence and "http://" links.
- Open your browser and disable HAYZUMFLEX.EXE plugins. Disable all unknown plugins. Reset the browser settings.
- Clean your Recycle bin and temporary files.
- Restart your computer and check results.
HAYZUMFLEX.EXE is related to: GenericRXAW-HD!F908630AD792, HAYZUMFLEX.EXE.
Virustotal = 34/57
MD5 = F908630AD7927243A6964F0462370EBA
File Size: 983040
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.