The file WMIN.EXE can destroy your system, thus making the computer to work abnormally.
WMIN.EXE is a dangerous file.
RemoveWMIN.EXE from your computer immediately.
Kill the process WMIN.EXE and remove WMIN.EXE from the Windows startup.
Malware Analysis of WMIN.EXE
Full path on a computer: %SysDir%\Temp\wmin.exe
Detected by UnHackMe:
WMIN.EXE
Default location: %SysDir%\Temp\wmin.exe
Removal Results: Success
Number of reboot: 1
WMIN.EXE is known as:
Trojan.Fsysna, Trojan.DownLoader11.22022, TR.Dropper.MSIL.73412, Trojan.Fsysna, Trojan.Agent, Trj.Chgt.D, a variant of MSIL.Injector.EVQ, Trojan.MSIL.Injector, Luhe.Fiha.T, Trojan.Fsysna.AOg
WMIN.EXE hash:
- MD5: 66b28c02c380a6f9f83ae78e0da12e35
How to quickly detect WMIN.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Google Update: “%SysDir%\Temp\wmin.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Google Update: “%SysDir%\Temp\wmin.exe”
Folders:- %SysDir%\Temp
Files:- %SysDir%\Temp\csrss.exe
- %SysDir%\Temp\wmin.exe