Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

ZMREJWPX.7Z is Trojan Spambot.11176

$
0
0

We checked up the file ZMREJWPX.7Z and found it hazardous.
The file ZMREJWPX.7Z must be deleted from the system immediately.
Kill the process ZMREJWPX.7Z and remove ZMREJWPX.7Z from the Windows startup.

Malware Analysis of ZMREJWPX.EXE
Full path on a computer: %Profile%\zmrejwpx.exe

Detected by UnHackMe:

ZMREJWPX.EXE
Default location: %Profile%\zmrejwpx.exe

Removal Results: Success
Number of reboot: 1

ZMREJWPX.EXE is known as:

Trojan.Spambot.11176, Troj.Androm-L, a variant of Win32.Injector.AJBF

ZMREJWPX.EXE hash:

  • MD5: 59830619e62b16d616a48c91d7e62409
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect ZMREJWPX.EXE presence?
Registry:
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSConfig: “”%Profile%\zmrejwpx.exe”"
Files:
  • %Recent%\1aafaad2cd589642f5f921ae3d67cbd8.lnk
  • %Recent%\sand-box.lnk
  • %Profile%\zmrejwpx.exe
  • %Temp%\1aafaad2cd589642f5f921ae3d67cbd8.jpg


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>