Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

XCODER BUILDER-NJ WORM.EXE is Trojan Downloader

$
0
0

The file XCODER BUILDER-NJ WORM.EXE is identified as a virus dropper.
The dropper XCODER BUILDER-NJ WORM.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file XCODER BUILDER-NJ WORM.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the XCODER BUILDER-NJ WORM.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the XCODER BUILDER-NJ WORM.EXE process and delete the file XCODER BUILDER-NJ WORM.EXE.

Malware Analysis of XCODER BUILDER-NJ WORM.EXE
Full path on a computer: %PROGRAMFILES%\COMPANY\XCODER BUILDER-NJ WORM\XCODER BUILDER-NJ WORM.EXE

Detected by UnHackMe:

XCODER BUILDER-NJ WORM.EXE
Default location: %PROGRAMFILES%\COMPANY\XCODER BUILDER-NJ WORM\XCODER BUILDER-NJ WORM.EXE

Removal Results: Success
Number of reboot: 1

XCODER BUILDER-NJ WORM.EXE is known as:

Trojan Downloader

How to quickly detect XCODER BUILDER-NJ WORM.EXE presence?
Files:
  • %PROGRAMFILES%\COMPANY\XCODER BUILDER-NJ WORM\UNINSTALL.INI
  • %PROGRAMFILES%\COMPANY\XCODER BUILDER-NJ WORM\UNINSTALL.EXE
  • %TEMP%\TROJAN.EXE
  • %SYSDIR%\WBEM\PERFORMANCE\WMIAPRPL_NEW.INI
  • %PROGRAMFILES%\COMPANY\XCODER BUILDER-NJ WORM\XCODER BUILDER-NJ WORM.EXE


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>