Our team of researches surfs the Internet on an everyday basis in search of the latest registry news and relevant information useful to visitors. This site strives to provide exciting registry information with two basic principles; Simplicity and Quality, with reference to the best information on registries.
The writers of the site present articles illustrated with images, while ensuring that the articles are both clear and concise in order to provide professional, yet easy to understand articles. Registry products and problems are analyzed and evaluated so as to present visitors with professional and factual articles. More...
May
26th

Computer System Invasion: frmwrk32.exe

Author: Indre | Files under Fix slow PC

Your system is not working as efficiently as it used to work! Your computer is acting all weird! This should bring you to the unpleasant realization that you have a virus residing on your system which is probably named frmwrk32.exe. Naturally, you need to get this problem sorted out. But in order to fix the computer you will first have to figure out the symptoms of the possible virus infection.

File Name : frmwrk32.exe  
File Size : 26112 byte  
File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit  
MD5 : 901041413e3f82eaeccf82012c51153b  
SHA1 : b6edb7371cf7394e7c9bac64cb673427b37a6f96  

Table 1.File information

In order to identify the potential computer threat you have to remember that the file “frmwrk32.exe” is likely to be created under the following filenames:

%System%\frmwrk32.exe
%Temp%\infected\frmwrk32.exe
%Temp%\infected\kwduu.exe
%Temp%\loader.exe

Also, you have to be familiar with the behavior of the infection, take a look:

  • The file is encrypted;
  • Ads an entry on Windows Registry;
  • Removes other running process.

Below are the alias names of the computer risk, this will help make your task easier when uncovering the possible infection:

Alias name
TR/Crypt.XPACK.Gen
Trojan/Win32.FraudLoad.dcz[Downloader]
Win32:Trojan-gen {Other}
SHeur2.NRG
Trojan.Renos.NGT
Win32/FakeAlert.ZY trojan.
Win32:Trojan-gen {Other} [Engine:B]
Win32.Troj.Dropper.ee.26112
Generic Downloader.x
TrojanDownloader:Win32/Renos.GT
W32/DLoader.MZUM
Trojan/W32.Agent.26112.BE
Adware/AntivirusXPPro
TrojanDownloader.FraudLoad.vi
Trojan.Win32.Nodef.azs
Mal/Generic-A
Malware-Cryptor.Win32.General.3 (suspicious)

To recap, computer users have to be careful due to the factor that frmwrk32.exe is a dangerous file with the intention of creating unwanted activities on a user’s computer. Therefore, it requires all users to be cautious!

Resources:
The list of alias names
The variants of frmwrk32.exe
Summary on the suspicious file

Post a Comment

Security Code: