tarjeta_260809.exe - Dangerous

tarjeta_260809.exe

Free Download

Manual removal instructions:

Antivirus Report of tarjeta_260809.exe:
tarjeta_260809.exe Malware
tarjeta_260809.exeDangerous
tarjeta_260809.exeHigh Risk
tarjeta_260809.exe
We suggest you to remove wupdate.exe from your computer as soon as possible.
Wupdate.exe is Trojan/Backdoor.
Kill the process wupdate.exe and remove wupdate.exe from Windows startup.

File: Tarjeta_260809.exe
-------------------------------------------------------------------------------------
Classification:
Code:
Antivirus Version Last Update Result
Avast 4.8.1335.0 2009.08.27 Win32:Trojan-gen {Other}
AVG 8.5.0.406 2009.08.28 Dropper.Generic.AVPM
BitDefender 7.2 2009.08.28 Gen:Trojan.Heur.gmNfb9u!nIT
Comodo 2115 2009.08.28 -
DrWeb 5.0.0.12182 2009.08.28 Trojan.PWS.LDPinch.4308
F-Secure 8.0.14470.0 2009.08.28 Trojan.Win32.VB.usz
Kaspersky 7.0.0.125 2009.08.28 Trojan.Win32.VB.usz
Microsoft 1.5005 2009.08.28 VirTool:Win32/Vbinder.gen!G
NOD32 4376 2009.08.28 -
Symantec 1.4.4.12 2009.08.28 Suspicious.MH690.A

Additional information
File size: 100876 bytes
MD5 : 714ace4171ff0cdec411981ed7128545
SHA1 : 74f3bda089c0a6a1df9346d981dbe031c9419226
-------------------------------------------------------------------------------------
Installation
When the program is executed, it creates the following registry subkeys and values:

----------------------------------
Keys added:2
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

----------------------------------
Values added:2
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\MicrosoftCorp: "C:\WINDOWS\system32\wupdate.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MicrosoftNAPC: "C:\WINDOWS\system32\wupdate.exe"

----------------------------------
Values modified:2
----------------------------------
HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID: 0x00000000
HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID: 0x0000040C

----------------------------------
Files added:1
----------------------------------
C:\WINDOWS\system32\wupdate.exe

----------------------------------
Files [attributes?] modified:0
----------------------------------

----------------------------------
Folders added:0
----------------------------------

----------------------------------
Folders deleted:0
----------------------------------

----------------------------------
Total changes:7
----------------------------------

-------------------------------------------------------------------------------------
Detected by RegRun Reanimator:

Item Name: MicrosoftCorp
Author: aertyuiygygkjgjk
Related File: C:\WINDOWS\system32\wupdate.exe
Type: Explorer Run

Item Name: wupdate.exe
Author:
Related File: C:\WINDOWS\system32\wupdate.exe
Type: Detected using Heuristic Algorithm

Item Name: MicrosoftNAPC
Author:
Related File: C:\WINDOWS\system32\wupdate.exe
Type: Registry Run

Removal Results: Success
Number of reboot: 1
-------------------------------------------------------------------------------------

Recommended software:
UnHackMe anti-rootkit and anti-malware
http://www.unhackme.com
RegRun Security Suite (Good choice for removal and protection)

Remove tarjeta_260809.exe now!

Dmitry Sokolov:

I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.

Since that time I work every day to fix the issues that antiviruses cannot.

If your antivirus have not helped you solve the problem, you should try UnHackMe.

We are a small company and you can ask me directly, if you have any questions.

Testimonials

You can read UnHackMe testimonials here.