We checked up the file ASGWEGWEGWEGSC.VBS and found it hazardous.
The file ASGWEGWEGWEGSC.VBS must be deleted from the system immediately.
Kill the process ASGWEGWEGWEGSC.VBS and remove ASGWEGWEGWEGSC.VBS from the Windows startup.
Malware Analysis of ASGWEGWEGWEGSC.VBS
Full path on a computer: %Temp%\asgwegwegwegsc.vbs
Detected by UnHackMe:
ASGWEGWEGWEGSC.VBS
Default location: %Temp%\asgwegwegwegsc.vbs
Removal Results: Success
Number of reboot: 1
ASGWEGWEGWEGSC.VBS is known as:
Trojan.Strictor
ASGWEGWEGWEGSC.VBS hash:
- MD5: e1a8466220bf760ac21eb2bc19cf4e1e
The file tries to download information from some web sites.
How to quickly detect ASGWEGWEGWEGSC.VBS presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\asgwegwegwegsc: “wscript.exe //B “%Temp%\asgwegwegwegsc.vbs”"
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\asgwegwegwegsc: “wscript.exe //B “%Temp%\asgwegwegwegsc.vbs”"
Files:
- %Appdata%\agfnakjgagasfasf.exe
- %Temp%\asfasflasf.txt
- %Temp%\asgwegwegwegsc.vbs
- %Startup%\asgwegwegwegsc.vbs