The file UPDATE87.EXE is a computer worm.
The worm UPDATE87.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the UPDATE87.EXE problem as soon as possible!
Delete the file UPDATE87.EXE from all infected computers in your network.
Set up your network firewall against UPDATE87.EXE intervention.
Malware Analysis of UPDATE87.EXE
Full path on a computer: %Temp%\update87.exe
Detected by UnHackMe:
UPDATE87.EXE
Default location: %Temp%\update87.exe
Removal Results: Success
Number of reboot: 1
UPDATE87.EXE is known as:
Worm.AutoIt, W32.Autoit.BGS.tr
UPDATE87.EXE hash:
- MD5: 4c211f78e82ccd7070e6cb397703593e
The file tries to download information from some web sites.
How to quickly detect UPDATE87.EXE presence?
Folders:
- %Appdata%\xzVxCQM
- %Appdata%\xzVxCQM\uJiiJSeH
- %Appdata%\xzVxCQM\uJiiJSeH\10.9.6.2
- C:\Adobe
Files:
- %Temp%\B594.dmp
- %Temp%\dw.log
- %Temp%\update32.exe
- %Temp%\update37.exe
- %Temp%\update87.exe
- C:\Adobe\dadggjlhboocblfmnbjglpjnijhjecog
- C:\Adobe\update.xml