The file TWEXT.EXE is malware related.
You must delete the file TWEXT.EXE immediately!
Delete the file TWEXT.EXE without delay!
Kill the process TWEXT.EXE and remove TWEXT.EXE from the Windows startup.
Malware Analysis of TWEXT.EXE
Full path on a computer: %SysDir%\twext.exe
Detected by UnHackMe:
TWEXT.EXE
Default location: %SysDir%\twext.exe
Removal Results: Success
Number of reboot: 1
TWEXT.EXE is known as:
Trojan.ZBot
TWEXT.EXE hash:
- MD5: a8817a653368d8a3af41ad81218c7f35
How to quickly detect TWEXT.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: “%SysDir%\userinit.exe,%SysDir%\twext.exe,”
Folders:- %SysDir%\twain_32
Files:- %Temp%\9ze1.exe
- %Temp%\9ze1.tmp
- %Temp%\9ze2.jpg
- %Temp%\9ze2.tmp
- %SysDir%\twain_32\local.ds
- %SysDir%\twain_32\user.ds
- %SysDir%\twext.exe