Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

ASGWEGWEGWEGSC.VBS is Trojan Strictor

$
0
0

We checked up the file ASGWEGWEGWEGSC.VBS and found it hazardous.
The file ASGWEGWEGWEGSC.VBS must be deleted from the system immediately.
Kill the process ASGWEGWEGWEGSC.VBS and remove ASGWEGWEGWEGSC.VBS from the Windows startup.

Malware Analysis of ASGWEGWEGWEGSC.VBS
Full path on a computer: %Temp%\asgwegwegwegsc.vbs

Detected by UnHackMe:

ASGWEGWEGWEGSC.VBS
Default location: %Temp%\asgwegwegwegsc.vbs

Removal Results: Success
Number of reboot: 1

ASGWEGWEGWEGSC.VBS is known as:

Trojan.Strictor

ASGWEGWEGWEGSC.VBS hash:

  • MD5: e1a8466220bf760ac21eb2bc19cf4e1e
The file tries to download information from some web sites.
How to quickly detect ASGWEGWEGWEGSC.VBS presence?
Registry:
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Run\asgwegwegwegsc: “wscript.exe //B “%Temp%\asgwegwegwegsc.vbs”"
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\asgwegwegwegsc: “wscript.exe //B “%Temp%\asgwegwegwegsc.vbs”"
Files:
  • %Appdata%\agfnakjgagasfasf.exe
  • %Temp%\asfasflasf.txt
  • %Temp%\asgwegwegwegsc.vbs
  • %Startup%\asgwegwegwegsc.vbs


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>