TTRY.EXE - Dangerous
%WinDir%\TTRY.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
TTRY.EXE is known as: Worm.Win32.Autorun.gar [Kaspersky Lab] W32/Scribble-B [Sophos] Worm:Win32/Autorun.NX [Microsoft] Worm.Win32.AutoRun [Ikarus] Win32/Virut.F [AhnLab] packed with PE_Patch [Kaspersky Lab].
MD5 of TTRY.EXE = EDC638CBA0EF7F2FC0174F2C35397118
TTRY.EXE size is 727552 bytes.
Full path on a computer: %WINDIR%\TTRY.EXE
Related Files:
%TEMP%\0KFP.EXE
%TEMP%\91F92CJ7.BAT
%TEMP%\ECS7OSPX0.TMP
%TEMP%\KLRYUFQ3H.EXE
%TEMP%\MOUSEDRIVER.BAT
%FONTSDIR%\SERVICES.EXE
%SYSTEM%\NWCWKS.DLL
%WINDIR%\TTRY.EXE
%SYSTEM%\ZMGN5T2.LOG
%WINDIR%\TEMP\0KFP.EXE
%WINDIR%\TEMP\CONIMA.EXE
%WINDIR%\TEMP\INLOG
%WINDIR%\TEMP\INPUT.BAT
%WINDIR%\TEMP\LOCALACCOUNTAUTHORITY.BAT
%WINDIR%\TEMP\LSSAS.EXE
%WINDIR%\TEMP\MANAGER.EXE
%WINDIR%\TEMP\MLOG
%WINDIR%\TEMP\MOUSEDRIVER.BAT
%WINDIR%\TEMP\PLUG.BAT
%WINDIR%\TEMP\XLUCCV19T.EXE
%WINDIR%\TEMP\YLOG