Computer System Invasion: frmwrk32.exe

Your system is not working as efficiently as it used to work! Your computer is acting all weird! This should bring you to the unpleasant realization that you have a virus residing on your system which is probably named frmwrk32.exe. Naturally, you need to get this problem sorted out. But in order to fix the computer you will first have to figure out the symptoms of the possible virus infection.

File Name : frmwrk32.exe
File Size : 26112 byte
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5 : 901041413e3f82eaeccf82012c51153b
SHA1 : b6edb7371cf7394e7c9bac64cb673427b37a6f96

Table 1.File information

In order to identify the potential computer threat you have to remember that the file "frmwrk32.exe" is likely to be created under the following filenames:

%System%\frmwrk32.exe
%Temp%\infected\frmwrk32.exe
%Temp%\infected\kwduu.exe
%Temp%\loader.exe

Also, you have to be familiar with the behavior of the infection, take a look:

• The file is encrypted;
• Ads an entry on Windows Registry;
• Removes other running process.

Below are the alias names of the computer risk, this will help make your task easier when uncovering the possible infection:

Alias name TR/Crypt.XPACK.Gen Trojan/Win32.FraudLoad.dcz[Downloader] Win32:Trojan-gen {Other} SHeur2.NRG Trojan.Renos.NGT Win32/FakeAlert.ZY trojan. Win32:Trojan-gen {Other} [Engine:B] Win32.Troj.Dropper.ee.26112 Generic Downloader.x TrojanDownloader:Win32/Renos.GT W32/DLoader.MZUM Trojan/W32.Agent.26112.BE Adware/AntivirusXPPro TrojanDownloader.FraudLoad.vi Trojan.Win32.Nodef.azs Mal/Generic-A Malware-Cryptor.Win32.General.3 (suspicious)

To recap, computer users have to be careful due to the factor that frmwrk32.exe is a dangerous file with the intention of creating unwanted activities on a user's computer. Therefore, it requires all users to be cautious!

Resources:
The list of alias names
The variants of frmwrk32.exe
Summary on the suspicious file