We suggest you to remove 10193904.exe from your computer as soon as possible.
10193904.exe is Trojan/Backdoor.
Kill the process 10193904.exe and remove 10193904.exe from Windows startup.
File: install.exe
Classification:
Antivirus Version Last Update Result
Avast 4.8.1335.0 2009.06.25 -
AVG 8.5.0.339 2009.06.25 Packed.Monder
BitDefender 7.2 2009.06.25 -
Comodo 1420 2009.06.25 -
DrWeb 5.0.0.12182 2009.06.25 -
F-Secure 8.0.14470.0 2009.06.25 -
Kaspersky 7.0.0.125 2009.06.25 -
Microsoft 1.4803 2009.06.25 -
NOD32 4189 2009.06.25 -
Symantec 1.4.4.12 2009.06.25 Trojan.Fakeavalert
Additional information
File size: 708642 bytes
MD5 : a0499193519aba03a9508e72338ddf08
SHA1 : 731f9a5a35d3c351bcba10a1cf7e09f017a5daea
Installation
When the program is executed, it creates the following registry subkeys and values:
----------------------------------
Keys deleted:1
----------------------------------
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew
----------------------------------
Keys added:2
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Extensions
----------------------------------
Values deleted:0
----------------------------------
----------------------------------
Values added:8
----------------------------------
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\10193904: "C:\Documents and Settings\All Users\Application Data\10193904\10193904.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009\DisplayName: "SystemSecurity2009"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009\ShortcutPath: "C:\Documents and Settings\Administrator\Start Menu\Programs\System Security\\System Security"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009\UninstallString: "C:\Documents and Settings\Administrator\Start Menu\Programs\System Security\\System Security"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SystemSecurity2009\DisplayIcon: "C:\Documents and Settings\All Users\Application Data\10193904\10193904.exe,0"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Extensions\.ini: "notepad.exe ^.ini"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Extensions\.txt: "notepad.exe ^.txt"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Extensions\.wtx: "notepad.exe ^.wtx"
----------------------------------
Values modified:0
----------------------------------
----------------------------------
Files added:3
----------------------------------
C:\Documents and Settings\Administrator\Desktop\System Security 2009.lnk
C:\Documents and Settings\Administrator\Start Menu\Programs\System Security\System Security
C:\Documents and Settings\All Users\Application Data\10193904\10193904.exe
----------------------------------
Files [attributes?] modified:0
----------------------------------
----------------------------------
Folders added:2
----------------------------------
C:\Documents and Settings\Administrator\Start Menu\Programs\System Security
C:\Documents and Settings\All Users\Application Data\10193904
----------------------------------
Folders deleted:0
----------------------------------
----------------------------------
Total changes:16
----------------------------------
-------------------------------------------------------------------------------------
Detected by RegRun Reanimator:
Item Name: 10193904
Author: Unknown
Related File: C:\Documents and Settings\All Users\Application Data\10193904\10193904.exe
Type: Registry Run
Removal Results: Success
Number of reboot: 1
-------------------------------------------------------------------------------------
Recommended software:
UnHackMe anti-rootkit and anti-malware
http://www.unhackme.com
RegRun Security Suite (Good choice for removal and protection)
http://www.regrun.com
Removal: 10193904.exe is removed by RegRun.
Download RegRun Suite. Click here.
Unzip downloaded file to any folder on your hard drive.
Open an executable file to start program installation.
Follow the installer instructions.
At the end of installing software on your computer you will be prompted
to run "Scan for Viruses".
Wait for a couple seconds to finish scanning.
Click on the "Fix Problems" button.
Is it serious?
|
The
programs is known as malware.
|
Item name:
|
10193904.exe
|
Click on the "Get it out!" button.

We suggest you to reboot your computer to be sure that your computer is
clean now.
Do not hesitate to contact us:
Support center
UnHackMe - Rootkit/Malware killer
Also recommended software:
RegRun Security Suite Platinum - removal and protection.
UnHackMe is a part of RegRun Security Suite Platinum.
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
November 16 2009
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?