%WinDir%\eksplorasi.exe |
| Name |
%WinDir%\eksplorasi.exe |
Description
|
eksplorasi.exe is a mass-mailing worm W32.Rontokbro.K@mm.
eksplorasi.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%UserProfile%\Local Settings\Application Data\csrss.exe
%UserProfile%\Local Settings\Application Data\inetinfo.exe
%UserProfile%\Local Settings\Application Data\lsass.exe
%UserProfile%\Local Settings\Application Data\services.exe
%UserProfile%\Local Settings\Application Data\smss.exe
%UserProfile%\Local Settings\Application Data\winlogon.exe
%UserProfile%\Start Menu\Programs\Startup\Empty.pif
%UserProfile%\Templates\Brengkolang.com
%Windir%\eksplorasi.exe
%Windir%\ShellNew\sempalong.exe
%System%\[USER NAME]'s Setting.scr
Adds the value:
"Shell" = "Explorer.exe "%Windir%\eksplorasi.exe""
to the Windows startup registry keys.
More info: http://securityresponse.symantec.com/avc...
Removal:
Kill eksplorasi.exe process and remove eksplorasi.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer. |
|
|
|
|
Home
