DRWEB.EXE - Dangerous
%TEMP%\DRWEB.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
DRWEB.EXE is known as: Mal/Behav-038 [Sophos] Trojan.Win32.Agent [Ikarus] packed with FSG [Kaspersky Lab].
MD5 of DRWEB.EXE = A71D53DF81D8F6C21651329FD98A1FBD
DRWEB.EXE size is 60252 bytes.
Full path on a computer: %TEMP%\DRWEB.EXE
Related Files:
%TEMP%\2470993950.EXE
%TEMP%\AVP32.EXE
%TEMP%\CKLZW31.EXE
%WINDIR%\SVCHOST.EXE
%TEMP%\DRWEB.EXE
%TEMP%\FGF4E3GTAEHG4HGAEHR45H.TMP
%TEMP%\G9W2DOPKL70WZ.EXE
%TEMP%\NVSVC32.EXE
%TEMP%\SETUP.EXE
%WINDIR%\CSRSS.EXE
%TEMP%\SYSEDIT.EXE
%TEMP%\TASKMGR.EXE
%TEMP%\TG3276FYGSUGRR.TMP
%TEMP%\USDH478Y4F.TMP
%TEMP%\WIN16.EXE
%TEMP%\WININST.EXE
%TEMP%\YAWGHD72Y7HUHD.TMP
%TEMP%\Z2IJZ2.EXE
%WINDIR%\IEXPLARER.EXE
%WINDIR%\LSASS.EXE
%SYSTEM%\CRXLSRE3KM.DLL
%SYSTEM%\MSZDSNDVA3.DLL
%SYSTEM%\P2HHR.BAT
%WINDIR%\WIN.EXE
%WINDIR%\WININST.EXE