OEMW7.EXE - Dangerous
OEMW7.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
OEMW7.EXE is known as: Trojan.Win32.Swisyn.yxx [Kaspersky Lab] Trojan.Win32.Swisyn [Ikarus].
MD5 of OEMW7.EXE = 14FEEE688A64A81FE548300D84D6D723
OEMW7.EXE size is 1828768 bytes.
Full path on a computer: %TEMP%\IR_EXT_TEMP_1\AUTOPLAY\DOCS\OEMW7.EXE
Related Files:
%TEMP%\4.TMP
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\AUDIO\CLICK1.OGG
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\AUDIO\HIGH1.OGG
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\AUTORUN.CDD
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\BUTTONS\GREEN_PILL.BTN
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\DOCS\OEMW7.EXE
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\IMAGES\WINDOWS-7-GENUINE-LOGO.PNG
%TEMP%\IR_EXT_TEMP_1\AUTOPLAY\IMAGES\WINDOWS-SIEBEN.JPG
%TEMP%\IR_EXT_TEMP_1\AUTORUN.EXE
%TEMP%\IXP000.TMP\7600_R~1.EXE
%TEMP%\_IR_TMPFNT_3\ARIAL_1.TFT
%TEMP%\_IR_TMPFNT_3\ARIAL_2.TFT
%SYSTEM%\LEGITCHECKCONTROL.DLL
%SYSTEM%\WGALOGON.DLL
%SYSTEM%\WGATRAY.EXE