We received the file SWISSARMYKNIFEV3.EXE and detected that SWISSARMYKNIFEV3.EXE is not good.
SWISSARMYKNIFEV3.EXE is Adware. You should remove the file SWISSARMYKNIFEV3.EXE.
Kill the process SWISSARMYKNIFEV3.EXE and remove SWISSARMYKNIFEV3.EXE from Windows.
Malware Analysis of SWISSARMYKNIFEV3.EXE
Full path on a computer: %Temp%\SWISSARMYKNIFEV3.EXE
Detected by UnHackMe:
SWISSARMYKNIFEV3.EXE
Default location: %Temp%\SWISSARMYKNIFEV3.EXE
Removal Results: Success
Number of reboot: 1
SWISSARMYKNIFEV3.EXE is known as:
Adware.Swiss.A
SWISSARMYKNIFEV3.EXE hash:
- MD5: 5be7786513fdb0288f276439487351ea
How to quickly detect SWISSARMYKNIFEV3.EXE presence?
Registry:
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MicroUpdate: “%SysDir%\MSDCSC\msdcsc.exe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: “%SysDir%\userinit.exe,%SysDir%\MSDCSC\msdcsc.exe”
Folders:
- %SysDir%\MSDCSC
Files:
- %Temp%\SWISSARMYKNIFEV3.EXE
- %SysDir%\MSDCSC\msdcsc.exe