We checked some samples of B88901.EXE and detected the file B88901.EXE as threat.
Remove the B88901.EXE file from your computer right now.
Removal tool: http://www.unhackme.com
Malware Analysis of B88901.EXE
Full path on a computer: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe
Detected by UnHackMe:
B88901.EXE
Default location: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe
Removal Results: Success
Number of reboot: 1
B88901.EXE is known as:
Trojan.Lethic, Trojan.Injector.XWZZ9oRWCPQ, Trojan.Agent.Gen-Undef, Troj.Agent-AAXV, TrojWare.Injector.BGJ, BackDoor.Gurl.2, Trojan.Agent.aaxv (v), Backdoor.Azbreg.bqi, Worm[Net].Kolab, Troj.Undef.(kcloud), Trojan.Lethic.B, Worm.Net-Kolab.68231, W32.Trojan.WLUI-7811, Trojan.HmBlocker, BScope.Backdoor.IRCBot.2122, Trj.Zbot.M, Win32.Lethic.AA, Trojan.Ircbrute, W32.Injector.AEJX.tr
B88901.EXE hash:
- MD5: 95ba755ea398afc905b6843bd9bcba66
How to quickly detect B88901.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\b88901: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe”
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: “explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe”
Folders:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896
Files:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\b88901.exe
- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118099896\Desktop.ini