The file B121PR100.EXE is identified as the Trojan Program that is used for stealing bank information and users passwords.
To delete B121PR100.EXE we suggest you should use UnHackMe:
http://www.unhackme.com
Malware Analysis of B121PR100.EXE
Full path on a computer: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe
Detected by UnHackMe:
B121PR100.EXE
Default location: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe
Removal Results: Success
Number of reboot: 1
B121PR100.EXE is known as:
Trojan.Gurl, Troj.Agent-AAXV, TrojWare.Injector.BGJ, BackDoor.Gurl.2, Trojan.Agent.aaxv (v), Backdoor.Azbreg.bqi, Worm[Net].Kolab, Troj.Undef.(kcloud), Trojan.Lethic.B, Worm.Net-Kolab.68231, W32.Trojan.WLUI-7811, Trojan.HmBlocker, BScope.Backdoor.IRCBot.2122, Trj.Zbot.M, Win32.Lethic.AA, Trojan.Ircbrute, W32.Injector.AEJX.tr
B121PR100.EXE hash:
- MD5: f8e3765980788150439037e3b599b77b
How to quickly detect B121PR100.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\b1e11pr00: “C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe”
- HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: “explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe”
Folders:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146
Files:- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\b121pr100.exe
- C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-118210146\Desktop.ini