Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

UPDATE87.EXE is Worm AutoIt

$
0
0

The file UPDATE87.EXE is a computer worm.
The worm UPDATE87.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the UPDATE87.EXE problem as soon as possible!
Delete the file UPDATE87.EXE from all infected computers in your network.
Set up your network firewall against UPDATE87.EXE intervention.

Malware Analysis of UPDATE87.EXE
Full path on a computer: %Temp%\update87.exe

Detected by UnHackMe:

UPDATE87.EXE
Default location: %Temp%\update87.exe

Removal Results: Success
Number of reboot: 1

UPDATE87.EXE is known as:

Worm.AutoIt, W32.Autoit.BGS.tr

UPDATE87.EXE hash:

  • MD5: 4c211f78e82ccd7070e6cb397703593e
The file tries to download information from some web sites.
How to quickly detect UPDATE87.EXE presence?
Folders:
  • %Appdata%\xzVxCQM
  • %Appdata%\xzVxCQM\uJiiJSeH
  • %Appdata%\xzVxCQM\uJiiJSeH\10.9.6.2
  • C:\Adobe
Files:
  • %Temp%\B594.dmp
  • %Temp%\dw.log
  • %Temp%\update32.exe
  • %Temp%\update37.exe
  • %Temp%\update87.exe
  • C:\Adobe\dadggjlhboocblfmnbjglpjnijhjecog
  • C:\Adobe\update.xml


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>