|
|
Shortcut Antivirus protects against Microsoft LNK and PIF vulnerability, notify a user about found threats and give possibility to immediately remove threats.
StuxnetRemover - free of charge Stuxnet/Tmphider rootkit removal tool.
New! RegRun Warrior Removing rootkits is best done from the "clean" Windows!
Malware Removal Blog - everyday malware tests.
|
 sorry.exe - Dangerous
Sorry.exe is Trojan/Backdoor. Kill the process sorry.exe and remove sorry.exe from Windows startup. File: loader_1.exe(C:\sand-box\loader_1.exe) Classification: Antivirus Version Last Update Result Avast 4.8.1335.0 2009.07.13 Win32:Trojan-gen {Other} AVG 8.5.0.387 2009.07.13 Downloader.Generic8.AYJX BitDefender 7.2 2009.07.13 - Comodo 1639 2009.07.13 - DrWeb 5.0.0.12182 2009.07.13 - F-Secure 8.0.14470.0 2009.07.13 Trojan-Downloader.Win32.Murlo.bjg Kaspersky 7.0.0.125 2009.07.13 Trojan-Downloader.Win32.Murlo.bjg Microsoft 1.4803 2009.07.13 TrojanDownloader:Win32/Suceret.gen!A NOD32 4240 2009.07.13 Win32/TrojanDownloader.Murlo.NAI Symantec 1.4.4.12 2009.07.13 Suspicious.MH690.A Additional information File size: 14336 bytes MD5 : 4dbda0d4ecc97171bbb6c31814720f21 SHA1 : 12e29d242bf754791e32a3c2aeba1afcd4327f85 Installation When the program is executed, it creates the following registry subkeys and values: ---------------------------------- Values added:1 ---------------------------------- HKCU\Software\Microsoft\version: "wpwnjlka" ---------------------------------- Values modified:2 ---------------------------------- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: "C:\WINDOWS\system32\userinit.exe," HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: "C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\sorry.exe" ---------------------------------- Files added:1 ---------------------------------- C:\WINDOWS\sorry.exe ---------------------------------- Files deleted:1 ---------------------------------- C:\sand-box\loader_1.exe ---------------------------------- Files [attributes?] modified:0 ---------------------------------- ---------------------------------- Folders added:0 ---------------------------------- ---------------------------------- Folders deleted:0 ---------------------------------- ---------------------------------- Total changes:5 ---------------------------------- ------------------------------------------------------------------------------------- Detected by RegRun Reanimator: Item Name: UserInit Author: Unknown Related File: C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\sorry.exe Type: UserInit Value Removal Results: Success Number of reboot: 1 ------------------------------------------------------------------------------------- Recommended software: UnHackMe anti-rootkit and anti-malware http://www.unhackme.com RegRun Security Suite (Good choice for removal and protection) http://www.regrun.com Removal: sorry.exe is removed by RegRun.
Read more... Removal instructions...
Comments:BobThe UnHackMe is a real program, no spyware or phish and works great and is easy to use. Enjoy! Sonya UnHackMe has demonstrated its protective power and gives me great peace of mind. Thank you for this excellent program and keep up the superb work! Chris I would like to say that RegRun has helped me on more than 1 occasion when it comes to spyware/adware by letting me know automatically that a piece of it got added to Windows startup. There is so much spyware/addware out there today it's hard to imagine being without RegRun. I like many other features too including the daily registry backups and file protection.
Constantly updated. Last update: August 29 2010
 We recommend! Click Here to Update All your PC's Outdated drivers
Would you like to add your opinion?
|
|
