home

windowexeallkiller.zip

The file windowexeallkiller.zip has been detected as a potentially unwanted program by 7 anti-malware scanners. The file has been seen being downloaded from files.downloadnow.com and multiple other hosts.
MD5:
d4ec5c9f6103c398318101a322019671

SHA-1:
0250b3bc98b2cab6f58437d66488df91b9077f36

SHA-256:
18bdfc9c9a7a248b3adcd8a9d85edac3caafafe3bfaa0e19a5b6a5054583b3dd

Scanner detections:
7 / 68

Status:
Potentially unwanted

Analysis date:
5/3/2024 5:17:54 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Malware-gen
2014.9-151029

Baidu Antivirus
Hacktool.MSIL.Agent
4.0.3.151029

Dr.Web
infected with Trojan.Yontoo.2622
9.0.1.05190

ESET NOD32
MSIL/HackTool.Agent.AQ potentially unsafe application
7.0.302.0

Fortinet FortiGate
Riskware/Agent
10/29/2015

McAfee
Trojan.Artemis!780B33F6818C
18.0.204.0

Vba32 AntiVirus
Trojan.MSIL.gen.16
3.12.26.4

File size:
157.4 KB (161,173 bytes)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\windowexeallkiller.zip

The file windowexeallkiller.zip has been seen being distributed by the following 2 URLs.

http://files.downloadnow.com/s/software/14/46/67/.../WindowexeAllkiller.zip?token=1458857916_c8278fdd764fe99e96c17beba5636100&fileName=WindowexeAllkiller.zip

http://windowexeallkiller.com/WindowexeAllkiller.zip

Remove windowexeallkiller.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.