The file EXP.DLL is identified as the Trojan Program that is used for stealing bank information and users passwords.
To delete EXP.DLL we suggest you should use UnHackMe:
http://www.unhackme.com
Malware Analysis of EXP.DLL
Full path on a computer: %SysDir%\exp.dll
Detected by UnHackMe:
Item Name: AppInit_DLLs
Author: Unknown
Related File: %SysDir%\exp.dll
Type: List of Injected DLLs
Item Name: ~backup~
Author: Unknown
Related File: %PERSONAL%\APPDATA\EXP.EXE
Type: Registry Run
Item Name: EXP.DLL
Author: Unknown
Related File: %SYSDIR%\EXP.DLL
Type: Multi AV Detected Files
Item Name: EXP.EXE
Author: Unknown
Related File: %PERSONAL%\APPDATA\EXP.EXE
Type: Multi AV Detected Files
Removal Results: Success
Number of reboot: 1
EXP.DLL is known as:
Trojan.Symmi.26550
EXP.DLL hash:
- MD5: 077968b405cd078688a93d9d20c0e5e0
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect EXP.DLL presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\~backup~: “%Personal%\AppData\exp.exe”
- HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs: “%SysDir%\exp.dll”
Folders:- %Personal%\AppData
Files:- %Personal%\AppData\exp.dat
- %Personal%\AppData\exp.exe
- %Personal%\AppData\exp.reg
- %SysDir%\exp.dll