Remove SOGOU_PINYIN_7.8.0.7255_6992.EXE malware
SOGOU_PINYIN_7.8.0.7255_6992.EXE Malware Removal Guide
Manual removal instructions:
Antivirus Report of SOGOU_PINYIN_7.8.0.7255_6992.EXE:
sogou_pinyin_7.8.0.7255_6992.exe
Full path on a computer: %PROFILE%\DOWNLOADS\SOGOU_PINYIN_7.8.0.7255_6992.EXE
Autostart registry keys:
HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1679eeb_0\: "{2}.\\?\hdaudio#func_01&ven_10ec&dev_0268&subsys_16310193&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume1\Users\test\Downloads\sogou_pinyin_7.8.0.7255_6992.exe%b{00000000-0000-0000-0000-000000000000}"
Related Files:
%PROFILE%\DESKTOP\???????.LNK
%PROFILE%\DOWNLOADS\SOGOU_EXPLORER_6.1PREVIEW_1224_V6.1.5.18751.EXE
%PROFILE%\DOWNLOADS\SOGOU_PINYIN_7.8.0.7255_6992.EXE
%ALLUSERSPROFILE%\MICROSOFT\DIAGNOSIS\DOWNLOADEDSCENARIOS\WINDOWS.PERFTRACKESCALATIONS.XML.NEW
%ALLUSERSPROFILE%\MICROSOFT\DIAGNOSIS\DOWNLOADEDSCENARIOS\WINDOWS.PERFTRACKPOINTDATA.XML.NEW
SOGOU_PINYIN_7.8.0.7255_6992.EXE is High Risk Trojan.
SOGOU_PINYIN_7.8.0.7255_6992.EXE must be removed immediately!
It can used for stealing bank information and users passwords.
SOGOU_PINYIN_7.8.0.7255_6992.EXE can download malicious software from hacker's web sites.
SOGOU_PINYIN_7.8.0.7255_6992.EXE allow someone to connect to your computer remotely.
SOGOU_PINYIN_7.8.0.7255_6992.EXE is related to: Trojan.MulDrop5.50742, SOGOU_PINYIN_7.8.0.7255_6992.EXE.
Virustotal = 2/54
MD5 = 556DAC782E73909DF72B01A26061CDF9
File Size: 37167064
| SOGOU_PINYIN_7.8.0.7255_6992.EXE | Malware |
| SOGOU_PINYIN_7.8.0.7255_6992.EXE | Dangerous |
| SOGOU_PINYIN_7.8.0.7255_6992.EXE | High Risk |
Autostart registry keys:
HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1679eeb_0\: "{2}.\\?\hdaudio#func_01&ven_10ec&dev_0268&subsys_16310193&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume1\Users\test\Downloads\sogou_pinyin_7.8.0.7255_6992.exe%b{00000000-0000-0000-0000-000000000000}"
Related Files:
%PROFILE%\DESKTOP\???????.LNK
%PROFILE%\DOWNLOADS\SOGOU_EXPLORER_6.1PREVIEW_1224_V6.1.5.18751.EXE
%PROFILE%\DOWNLOADS\SOGOU_PINYIN_7.8.0.7255_6992.EXE
%ALLUSERSPROFILE%\MICROSOFT\DIAGNOSIS\DOWNLOADEDSCENARIOS\WINDOWS.PERFTRACKESCALATIONS.XML.NEW
%ALLUSERSPROFILE%\MICROSOFT\DIAGNOSIS\DOWNLOADEDSCENARIOS\WINDOWS.PERFTRACKPOINTDATA.XML.NEW
SOGOU_PINYIN_7.8.0.7255_6992.EXE is High Risk Trojan.
SOGOU_PINYIN_7.8.0.7255_6992.EXE must be removed immediately!
It can used for stealing bank information and users passwords.
SOGOU_PINYIN_7.8.0.7255_6992.EXE can download malicious software from hacker's web sites.
SOGOU_PINYIN_7.8.0.7255_6992.EXE allow someone to connect to your computer remotely.
SOGOU_PINYIN_7.8.0.7255_6992.EXE is related to: Trojan.MulDrop5.50742, SOGOU_PINYIN_7.8.0.7255_6992.EXE.
Virustotal = 2/54
MD5 = 556DAC782E73909DF72B01A26061CDF9
File Size: 37167064
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.