We checked up the file WIN112.EXE and found it hazardous.
The file WIN112.EXE must be deleted from the system immediately.
Kill the process WIN112.EXE and remove WIN112.EXE from the Windows startup.
Malware Analysis of WIN112.EXE
Full path on a computer: %SYSTEMDRIVE%\SYSKEY\WIN112.EXE
Detected by UnHackMe:
WIN112.EXE
Default location: %SYSTEMDRIVE%\SYSKEY\WIN112.EXE
Removal Results: Success
Number of reboot: 1
WIN112.EXE is known as:
Trojan.Muldrop5
How to quickly detect WIN112.EXE presence?
![]( "Files")
Files:
Files:- %SYSTEMDRIVE%\SYSKEY\KKLGR.DLL
- %TEMP%\TMP3.TMP
- %TEMP%\1.TMP\SETUP.BAT
- %TEMP%\2.TMP\MOVE.BAT
- %SYSTEMDRIVE%\SYSKEY\WIN112.EXE