GH5H166.EXE - Dangerous
GH5H166.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
GH5H166.EXE is known as: Worm.Win32.Koobface [Ikarus] packed with UPX [Kaspersky Lab].
MD5 of GH5H166.EXE = 8C547549BEA45C23E2EABF837A2D0F2A
GH5H166.EXE size is 137728 bytes.
Full path on a computer: %WINDIR%\GH5H166.EXE
Related Files:
C:\CAPTCHA.LOG
%APPDATA%\UTORRENT\68_CELTIC_LORE_SIDHE_HILLS.TORRENT
%APPDATA%\UTORRENT\APPS.BTAPP
%APPDATA%\UTORRENT\RESUME.DAT
%APPDATA%\UTORRENT\RESUME.DAT.OLD
%APPDATA%\UTORRENT\SETTINGS.DAT
%APPDATA%\UTORRENT\SETTINGS.DAT.OLD
%APPDATA%\101120101465746103.XXE
%APPDATA%\RDR_1303924191.EXE
%TEMP%\68_CELTIC_LORE_SIDHE_HILLS\SETUP2.CAB
%TEMP%\8.TMP
%TEMP%\IEXPLORE.EXE
%TEMP%\IEXPLORE1.DAT
%TEMP%\ZPSKON_1303956096.EXE
%TEMP%\ZPSKON_1303946139.EXE
%TEMP%\ZPSKON_1303953991.EXE
%USERPROFILE%\USERDATA\INDEX.DAT
C:\SOFT20110427_AOL.LOG
C:\SOFT20110427_FB.LOG
C:\SOFT20110427_GLOBAL.LOG
C:\SOFT20110427_TW.LOG
C:\SOFT20110427_TWREG.LOG
%WINDIR%\BT7.DAT
%WINDIR%\GH5H166.EXE
%WINDIR%\LGO
%SYSTEM%\123.TMP
%SYSTEM%\CAPTCHA.DLL
%WINDIR%\TEMP\C.TMP
%WINDIR%\TWPS