The program YZRPPJBO.EXE is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with YZRPPJBO.EXE.
Download for free: http://www.unhackme.com
Malware Analysis of YZRPPJBO.EXE
Full path on a computer: %Profile%\yzrppjbo.exe
Detected by UnHackMe:
Item Name: MSConfig
Author: Bitcoin project
Related File: %PROFILE%\YZRPPJBO.EXE
Type: Registry Run
Item Name: YZRPPJBO.EXE
Author:
Related File: %PROFILE%\YZRPPJBO.EXE
Type: Multi AV Detected Files
Removal Results: Success
Number of reboot: 1
YZRPPJBO.EXE is known as:
Backdoor.Androm.arkz, Win32.Tofsee.AX
YZRPPJBO.EXE hash:
- MD5: 1f100949955d1e862c7cc7d5f942677e
The file tries to download information from some web sites.
How to quickly detect YZRPPJBO.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSConfig: “”%Profile%\yzrppjbo.exe”"
Files:- %Recent%\001a6c071aa01eb0ff9077fd45d8e4f1.lnk
- %Recent%\sand-box.lnk
- %Profile%\yzrppjbo.exe
- %Temp%\001a6c071aa01eb0ff9077fd45d8e4f1.jpg