We received the file SE.EXE and detected that SE.EXE is not good.
SE.EXE is Adware. You should remove the file SE.EXE.
Kill the process SE.EXE and remove SE.EXE from Windows.
Malware Analysis of SE.EXE
Full path on a computer: %Appdata%\SkypEmoticons\SE.exe
Detected by UnHackMe:
SE.EXE
Default location: %Appdata%\SkypEmoticons\SE.exe
Removal Results: Success
Number of reboot: 1
SE.EXE is known as:
Adware.PUP.SkypEmoticons
SE.EXE hash:
- MD5: 4f52c57d29472d95e8dfe199dbc3dc4e
The file tries to download information from some web sites.
How to quickly detect SE.EXE presence?
Registry:
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SkypEmoticons_is1\DisplayName: “SkypEmoticons”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SkypEmoticons_is1\UninstallString: “”%Appdata%\SkypEmoticons\unins000.exe”"
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\se: “C:\Users\user\AppData\Roaming\SkypEmoticons\SE.exe /minimized ”
Folders:
- %Appdata%\SkypEmoticons
- %Common Startmenu%\Programs\SkypEmoticons
Files:
- %Appdata%\SkypEmoticons\Lng.s
- %Appdata%\SkypEmoticons\Res.dll
- %Appdata%\SkypEmoticons\SE.exe
- %Appdata%\SkypEmoticons\unins000.dat
- %Appdata%\SkypEmoticons\unins000.exe
- %Common Startmenu%\Programs\SkypEmoticons\SkypEmoticons.lnk