Is the file WINDOWS SESION MANAGER.EXE located on your computer? Then your computer is infected.
We do suggest you should remove WINDOWS SESION MANAGER.EXE from your computer as soon as possible.
WINDOWS SESION MANAGER.EXE is Trojan/Backdoor.
Kill the process WINDOWS SESION MANAGER.EXE and remove WINDOWS SESION MANAGER.EXE from the Windows startup.
Malware Analysis of WINDOWS SESION MANAGER.EXE
Full path on a computer: %Appdata%\Windows Sesion Manager.exe
Detected by UnHackMe:
WINDOWS SESION MANAGER.EXE
Default location: %Appdata%\Windows Sesion Manager.exe
Removal Results: Success
Number of reboot: 1
WINDOWS SESION MANAGER.EXE is known as:
Trojan.VBKrypt
WINDOWS SESION MANAGER.EXE hash:
- MD5: 5898b83f2f1ea9d2e64aa2494d7391f9
How to quickly detect WINDOWS SESION MANAGER.EXE presence?
Registry:
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Sesion Manager: “”%Appdata%\Windows Sesion Manager.exe””
Files:
- %Appdata%\Windows Sesion Manager.exe
- %Temp%\sHkSp.exe
- %Temp%\sHsif.hkp