We checked up the file TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE and found it hazardous.
The file TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE must be deleted from the system immediately.
Kill the process TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE and remove TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE from the Windows startup.
Malware Analysis of TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE
Full path on a computer: %LOCAL APPDATA%\OEMDATA\TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE
Detected by UnHackMe:
TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE
Default location: %LOCAL APPDATA%\OEMDATA\TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE
Removal Results: Success
Number of reboot: 1
TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE is known as:
Trojan.Killproc
How to quickly detect TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE presence?
Files:
- %LOCAL APPDATA%\OEMDATA\TSUSBREDIRECTIONGROUPPOLICYEXTENSION.MUI
- %APPDATA%\ROAMING\48583
- %LOCAL APPDATA%\OEMDATA\TSUSBREDIRECTIONGROUPPOLICYEXTENSION.EXE