The file ATNXW11A9.EXE can destroy your system, thus making the computer to work abnormally.
ATNXW11A9.EXE is a dangerous file.
RemoveATNXW11A9.EXE from your computer immediately.
Kill the process ATNXW11A9.EXE and remove ATNXW11A9.EXE from the Windows startup.
Malware Analysis of ATNXW11A9.EXE
Full path on a computer: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe
Detected by UnHackMe:
ATNXW11A9.EXE
Default location: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe
Removal Results: Success
Number of reboot: 1
ATNXW11A9.EXE is known as:
Trojan.Gurl, W32.Trojan2.NWBR, Ircbrute.GX, Win32.Lethic.THCJaN, Trojan.Injector.XWZZ9oRWCPQ, Worm.Net-Kolab.68231, Troj.Agent-AAXV, TrojWare.Injector.BGJ, BackDoor.Gurl.2, Trojan.Agent.aaxv (v), Backdoor.Azbreg.bqi, Troj.Undef.(kcloud), Trojan.Lethic.B, Trojan.Agent.Gen-Undef, Trojan.HmBlocker, W32.Trojan.WLUI-7811, BScope.Backdoor.IRCBot.2122, Trj.Zbot.M, Win32.Injector.AEJX, Trojan.Ircbrute, W32.Injector.AEJX.tr
ATNXW11A9.EXE hash:
- MD5: 8af301f0085d24b3ca31ce02fdb4bd27
Registry:- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\antaw411r9: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe”
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: “explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe”
Folders:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819
Files:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\atnxw11a9.exe
- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-5618147819\Desktop.ini