|
|
Malware Tests - removal of the newest malware.
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Get it! |
 bootcfg.exe - Dangerous
Bootcfg.exe is Trojan/Backdoor. Kill the file bootcfg.exe and remove bootcfg.exe from Windows startup. File: flash.exe Classification: Antivirus Version Last Update Result Avast 4.8.1335.0 2009.06.23 - AVG 8.5.0.339 2009.06.23 - BitDefender 7.2 2009.06.24 Generic.Malware.FYddld.AA084B47 Comodo 1404 2009.06.24 - DrWeb 5.0.0.12182 2009.06.23 DDoS.Doit F-Secure 8.0.14470.0 2009.06.24 Trojan:W32/Agent.KYH Kaspersky 7.0.0.125 2009.06.24 Trojan-Downloader.Win32.Small.jxb NOD32 4182 2009.06.24 - Symantec 1.4.4.12 2009.06.24 - Additional information File size: 15360 bytes MD5 : 350df064a4ecc7b50dfeaf4a988e5832 SHA1 : 84185c4494af0f61f1e677f0d164b61de604817a Installation When the program is executed, it creates the following registry subkeys and values: ---------------------------------- Keys added:2 ---------------------------------- HKLM\SOFTWARE\Microsoft\ESENT\Process\bootcfg HKLM\SOFTWARE\Microsoft\ESENT\Process\bootcfg\DEBUG ---------------------------------- Values added:3 ---------------------------------- HKLM\SOFTWARE\Microsoft\ESENT\Process\bootcfg\DEBUG\Trace Level: "" HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\Application Data\bootcfg.exe: "C:\Documents and Settings\Administrator\Application Data\bootcfg.exe:*:Enabled:WinProtect" HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WinProtect: "C:\Documents and Settings\Administrator\Application Data\bootcfg.exe srv" ---------------------------------- Values modified:0 ---------------------------------- ---------------------------------- Files added:1 ---------------------------------- C:\Documents and Settings\Administrator\Application Data\bootcfg.exe ---------------------------------- Files [attributes?] modified:0 ---------------------------------- ---------------------------------- Folders added:0 ---------------------------------- ---------------------------------- Folders deleted:0 ---------------------------------- ---------------------------------- Total changes:6 ---------------------------------- ------------------------------------------------------------------------------------- Detected by RegRun Reanimator: Item Name: WinProtect Author: Unknown Related File: C:\Documents and Settings\Administrator\Application Data\bootcfg.exe srv Type: Registry Run Removal Results: Success Number of reboot: 1 Recommended software: UnHackMe anti-rootkit and anti-malware http://www.unhackme.com RegRun Security Suite (Good choice for removal and protection) http://www.regrun.com Removal: bootcfg.exe is removed by RegRun.
Click on the "Get it out!" button.  We suggest you to reboot your computer to be sure that your computer is clean now. Do not hesitate to contact us: Support center
UnHackMe - Rootkit/Malware killer
Also recommended software: UnHackMe is a part of RegRun Security Suite Platinum.
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: November 16 2009
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
Download RegRun Suite. 
Open an executable file to start program installation.
