The file TASKSHELL.EXE is identified as a virus dropper.
The dropper TASKSHELL.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file TASKSHELL.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the TASKSHELL.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the TASKSHELL.EXE process and delete the file TASKSHELL.EXE.
Malware Analysis of TASKSHELL.EXE
Full path on a computer: %SysDir%\taskshell.exe
Detected by UnHackMe:
TASKSHELL.EXE
Default location: %SysDir%\taskshell.exe
Removal Results: Success
Number of reboot: 1
TASKSHELL.EXE is known as:
Trojan.Scar.faph, Trojan.Scar.iAizKlehtmU, Trojan.Agent.Gen-Keylogger, Trojan.KeyLogger.8211, TR.Rogue.6824952.1, Mal.Emogen-H, Trojan.Scar.atgo, Trojan.A.Scar.90112.T, Trojan.Keylogger, Win32.Spy.VB.NNQ, Trojan.Scar, W32.KeyLogger.VBY.tr, PSW.Agent.AHOY
TASKSHELL.EXE hash:
- MD5: 3955e4c392d0613cfe8e7e7f71402629
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\taskshell.exe: “C:\windows\system32\taskshell.exe”
Files:- %SysDir%\taskshell.exe
- %WinDir%\resim.jpg