Trojan.InstallMonster.1549

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

Trojan.InstallMonster.1549 also known as Malware.Generic.3!tfe (thunder:3:vSxWZXk093T) , HEUR/QVM05.1.0000.Malware.Gen, trojan.win32.zonsterarch.bw.

Malware Analysis of Trojan.InstallMonster.1549 – SILENT_INSTALLER.EXE

Created files:

%TEMP%\NSBBA17.TMP\LIBEAY32.DLL
%TEMP%\NSBBA17.TMP\SSLEAY32.DLL
%TEMP%\{8DD597B8-FB6D-4158-9350-9AA9B122B471}\SILENT_INSTALLER.EXE
%WINDIR%\TEMP\CR_A1F51.TMP\CHROME_PATCH.PACKED.7Z
%WINDIR%\TEMP\CR_A1F51.TMP\SETUP.EXE

Autostart registry keys:

HKLM\SOFTWARE\CLASSES\CLSID\{C379EAD1-CB34-4B09-AF6B-7E587F8BCD80}\LOCALSERVER32\: “%SYSTEMDRIVE%\SAND-BOX\C75ECF4BA6A56828C8F34344831582A3.EXE”

Detected by UnHackMe:

SILENT_INSTALLER.EXE
DEFAULT LOCATION: %TEMP%\{8DD597B8-FB6D-4158-9350-9AA9B122B471}\SILENT_INSTALLER.EXE

Dropper hash(md5): c75ecf4ba6a56828c8f34344831582a3

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera