TROJ_MADI.AD


 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW


This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

415,744 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

22 Nov 2013

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Winlogon
Taskman = "{malware path and file name}"

Dropping Routine

This Trojan drops the following files:

  • first.dll
  • 90Hkado.xls
  • 2XbWEzZ.xls
  • Wh6h1lt.xls
  • xRmxExx.xls
  • YDcLrQt.xls
  • VvGv6QJ.xls
  • pu0Rjvz.xls
  • 3EnYvXs.xls
  • lh1kVgY.xls
  • DgZCYJx.xls
  • kuuysU7.xls
  • iGNDrmk.xls
  • NQylVxS.xls
  • BRE10TQ.xls
  • hkvHPxv.xls
  • r1cEpON.xls
  • PWrzPOW.xls
  • wdqA4Qx.xls
  • sy4dN6S.xls
  • zEPvyCk.xls
  • MTrQdFg.xls
  • XHfI2xs.xls
  • Vykxh8C.xls
  • Ga7Oq0R.xls
  • MRr773t.xls
  • XKWNw3B.xls
  • Q0mRlc0.xls
  • 2Zv7ZEm.xls
  • XS4ZuAH.xls
  • 1llTNAu.xls
  • LLsePLI.xls
  • wO0ziNY.xls
  • OnotWyy.xls
  • DtjzhQr.xls
  • rqS7Pnt.xls
  • kvwUKy7.xls
  • SOmS7To.xls
  • Qw706by.xls
  • jor3Wqe.xls
  • IHVdzOi.xls
  • IIoG3Cl.xls
  • tnyoWcw.xls
  • AXAchM2.xls
  • 2I2vGDR.xls
  • MMZ0yN7.xls
  • c1ETBJ8.xls
  • 7AtAD9y.xls
  • 1iBL1R6.xls
  • rfK6V3Y.xls
  • apBifzl.xls
  • OeNQDqc.xls
  • Qm9O80.Exe
  • y4Scgp.Exe
  • hg4Mpw.Exe
  • zRD4TQ.Exe
  • Zb0jsc.Exe
  • 57omwF.Exe
  • XdfUNB.Exe
  • Zb6C6L.Exe
  • rvvgah.Exe
  • wndbyV.Exe
  • YY0fKd.Exe
  • CYT9gB.Exe
  • kjpgbu.Exe
  • ux9cjm.Exe
  • aSoviB.Exe
  • RNeNnD.Exe
  • ucFYmM.Exe
  • jmhTMG.Exe
  • EF2mOb.Exe
  • Ks3t6c.Exe
  • hpMOIZ.Exe
  • Pb1U0c.Exe
  • eXAUXQ.Exe
  • OjLfEg.Exe
  • 3oZWCA.Exe
  • v8XdL5.Exe
  • bMDwtS.Exe
  • GMQUl2.Exe
  • AMEdfi.Exe
  • og01yw.Exe
  • Q4DoTl.Exe
  • dgwmUW.Exe
  • KOyoys.Exe
  • zUvzid.Exe
  • r79tJ0.Exe
  • kEKpUi.Exe
  • u7ClUU.Exe
  • 7C4HPf.Exe
  • x2hMZI.Exe
  • PHxR6a.Exe
  • EgzM5e.Exe
  • J6XkCh.Exe
  • 0puAbD.Exe
  • La91TF.Exe
  • Sh64ZW.Exe
  • MeiGEx.Exe
  • ZVYLyS.Exe
  • lNNbgn.Exe
  • E6nYS5.Exe
  • wcew02.Exe
  • EHzvoY.Exe
  • V6g7VcxUK.dll
  • OzA9ob6QD.dll
  • mGH7IHsS7.dll
  • q3YP6v0JD.dll
  • lJOHyCzzX.dll
  • k9PMzTHB8.dll
  • FOPAgeZ8Y.dll
  • jFkvtFQq7.dll
  • nkkqPuzjK.dll
  • FSpDyX9ci.dll
  • gK5fbb08h.dll
  • IM21diYma.dll
  • 81GKgfYTN.dll
  • 6JAHaP0RZ.dll
  • 5AN0UdhBA.dll
  • ruPktXvT7.dll
  • OZabyXDC1.dll
  • ji8Mo8bmk.dll
  • s1pZFytzc.dll
  • TFZOx1mLf.dll
  • 1mmzROSem.dll
  • Lh3IS00F7.dll
  • 7IX5gDtSv.dll
  • IY0iYPqMf.dll
  • LAMLx6eYe.dll
  • gLHaWyNkd.dll
  • vqUbBxAo8.dll
  • OuIUKX6AE.dll
  • 4bfiewUwo.dll
  • b4RB8liyR.dll
  • 63nBDvPzs.dll
  • PZn8uq9R3.dll
  • i24zBWP5W.dll
  • ftHoNR0vI.dll
  • 1abtx2lxW.dll
  • W1nUgpKCq.dll
  • fkg5IGe8q.dll
  • EwXiT2hKy.dll
  • DrzgQqmEB.dll
  • fqnFpbkp4.dll
  • TfyeN3aRl.dll
  • wRR6eN5sS.dll
  • RzbgKIoOy.dll
  • UY1Arfc59.dll
  • 11orqfIkG.dll
  • JzUSM4aeO.dll
  • X5TX0650C.dll
  • ToqrxTuRq.dll
  • W9eMs0hoF.dll
  • abgJ5I9tj.dll
  • DiLBMGTjN.dll
  • EMjOZhPhB.dll
  • wtqZQvuPR.dll
  • eW818n1Ml.dll
  • C8pjpL6Di.dll
  • IMqef6GP1.dll
  • DJO1tR8lf.dll
  • W4IaV0APf.dll
  • 996yifEWs.dll
  • w9W0WWOdC.dll
  • HlslJ5XPe.dll
  • f5ajZXdD8.dll
  • mb6hFMGug.dll
  • 2k13waphJ.dll
  • j3AvrcZmm.dll
  • 64Xs6FdkB.dll
  • cLpmKTF9l.dll
  • OezPY4Dv9.dll
  • GnSnzojKN.dll
  • zxaUaKYZt.dll
  • sPxI8Kwrk.dll
  • zzfrzc4bx.dll
  • va5977mWz.dll
  • RKk4LSFo9.dll
  • lz0OrMh4k.dll
  • 5jqJYOG2N.dll
  • 5WtbRuLQD.dll
  • 9r6tuzsYl.dll
  • pp2GC59np.dll
  • 825fadEA5.dll
  • bovEsilnw.dll
  • gvqDCCWUB.dll
  • 3KPY8u8Gx.dll
  • qOdIs1cyh.dll
  • 9p7A6RHP1.dll
  • w0EwXxNgv.dll
  • lrgCOaJ8e.dll
  • EY06cSfz5.dll
  • SVuCFOock.dll
  • SuZJ98xdN.dll
  • rmn1P8g0N.dll
  • dPGTd4KfO.dll
  • rxJOATE4N.dll
  • J6Y8WBftX.dll
  • 6VdkonAv9.dll
  • SxcL6BKlk.dll
  • 3PZunTdL0.dll
  • 9HVxV3clw.dll
  • HUiknQvei.dll
  • p6gqxTXo7.dll
  • j4BDkCSpo.dll
  • OgzCDrRB3.dll
  • c8gQHiI2v.dll
  • aH4m1Bncm.dll
  • 4IqEyRtZ0.dll
  • REmE9zcNM.dll
  • PFhe1ADZO.dll
  • h6zeNXuEc.dll
  • s3p05xPkd.dll
  • wHIPXSAEq.dll
  • JBIoNFQHv.dll
  • Hh9pZ196m.dll
  • oJRTogG9l.dll
  • Hs3lsNGWa.dll
  • bD2xa5w5T.dll
  • rXn040kif.dll
  • REA8jHgNG.dll
  • xVLhBrUQK.dll
  • JWH6l6ZgI.dll
  • iYcMDld15.dll
  • 84cpwwbQj.dll
  • SuvUBntgr.dll
  • tkcZn1whW.dll
  • XnfiY10Le.dll
  • zbC1U4bWT.dll
  • axdK9keiO.dll
  • P9z6dZ4jU.dll
  • SAX1ILQgz.dll
  • shxLGgZz7.dll
  • 4ZRFfDcdS.dll
  • gmaOQTdho.dll
  • sIdHsuivF.dll
  • OoxhHmCt5.dll
  • OjqWKPHlS.dll
  • r8KALUzkO.dll
  • bysZfeXc5.dll
  • Jnh0D6j76.dll
  • dsEP4EXsd.dll
  • 1hwWIZ4a0.dll
  • mxcK2Ym9e.dll
  • 6KH7IANiT.dll
  • TLhepKNWG.dll
  • JPbJrZHLl.dll
  • 50eY21573.dll
  • PC00lzmJ4.dll
  • mGYdXVK1b.dll
  • 4uc0G3L9H.dll
  • j8oz4YzOj.dll
  • UmY8QyDLU.dll
  • H72OpWOwd.dll
  • AmgpA5o0E.dll
  • nOJA7JxOK.dll
  • 0yWXzpJuY.dll
  • nZsskYEIx.dll
  • IbgiZ9X8G.dll
  • L5BlemMVw.dll
  • COoKU0yiW.dll
  • kPnQTH8Vt.dll
  • RRSxGtulM.dll
  • AualcgXpG.dll
  • g8BP9Rz5s.dll
  • ayrNRY6dC.dll
  • MVJLzJ68Z.dll
  • CmUAfOXzm.dll
  • AnagcsdtN.dll
  • WzX7RCwSW.dll
  • JZ8VxHEGd.dll
  • ecyQkWafv.dll
  • BH6StCmZQ.dll
  • HitwMbWAo.dll
  • 6RxFBH5Wj.dll
  • hOf8d3ede.dll
  • TYN1W1aZ3.dll
  • Z4HnPhL9Q.dll
  • CepXtxHQy.dll
  • 5ldBI2u0A.dll
  • rFjWe1Kj8.dll
  • e93lIjRPt.dll
  • lnu4I8nYd.dll
  • UD8FrEC7w.dll
  • V9gWATATW.dll
  • G6py64UI0.dll
  • OCk99fjQ2.dll
  • JkXfBHOvm.dll
  • 3xfCECkuH.dll
  • JwShSDYrz.dll
  • 3qkPtIuZE.dll
  • GxDTqulPY.dll
  • 8lHmcreOP.dll
  • 1gaGuASBi.dll
  • 0u0ke2dhl.dll
  • 9tQpSVnNJ.dll
  • XFOaLkhww.dll
  • TV4LsXIt2.dll
  • LIdAThpv8.dll
  • QPup2A51x.dll
  • wGUcUBJE0.dll
  • jE1gloQb9.dll
  • O3ZvKFori.dll
  • Hncdqw3De.dll
  • gy4tZ5gDK.dll
  • WnaT.txt
  • krUt.txt
  • rtrp.txt
  • a9WX.txt
  • CknT.txt
  • o1Sr.txt
  • 1SMh.txt
  • rqqs.txt
  • Dkan.txt
  • cv2D.txt
  • 3Jfe.txt
  • MoKM.txt
  • 9ydf.txt
  • KCWH.txt
  • pUwM.txt
  • cqx7.txt
  • bdal.txt
  • AJPZ.txt
  • p6l4.txt
  • RR2B.txt
  • M3rL.txt
  • n4NM.txt
  • hF9Z.txt
  • dqPM.txt
  • tbkG.txt
  • 5O71.txt
  • Ljue.txt
  • KCIm.txt
  • Fhq2.txt
  • aMrs.txt
  • Pznb.txt
  • XNrY.txt
  • lMfv.txt
  • sRm3.txt
  • YAhe.txt
  • VwpI.txt
  • taxt.txt
  • xftV.txt
  • Ftn2.txt
  • a8L6.txt
  • Byo5.txt
  • Fg5c.txt
  • B3N4.txt
  • zBvx.txt
  • Ucam.txt
  • EQsa.txt
  • KxSZ.txt
  • hFvu.txt
  • kSCO.txt
  • Vy3S.txt
  • TXf8.txt
  • Ob3INGxR.xml
  • sgUNq3nq.xml
  • 5I9Nc5qo.xml
  • kwVC7Zaz.xml
  • qLkeaPMT.xml
  • g9RjbLBD.xml
  • CqS8pxyE.xml
  • lwwYzK3l.xml
  • TefpX3lf.xml
  • xD1muHdK.xml
  • yO2xMZbK.xml
  • M8tLEo75.xml
  • dsmRHeZl.xml
  • jPPKCdBz.xml
  • KWyROksW.xml
  • raqEfu69.xml
  • Mvy3bVnN.xml
  • 1FGIN4iS.xml
  • 8sW45JOk.xml
  • MSCs2xBe.xml
  • o1UwuNAL.xml
  • wf7UAZYS.xml
  • 7GmZhYc2.xml
  • UOF1ZIbI.xml
  • 3i6xi4y4.xml
  • mkBlKi6u.xml
  • D4yFDjJw.xml
  • DgWhbDKR.xml
  • 3W2CrQQC.xml
  • iguRPLCh.xml
  • 9MeSD9sQ.xml
  • WDjK9Jsj.xml
  • HESSOTKj.xml
  • WNUpz7Bn.xml
  • CFFzhHhS.xml
  • QsoiK0gU.xml
  • tiVH7Zak.xml
  • ZppvouBj.xml
  • i9edib0f.xml
  • kqc3siZ2.xml
  • XTmuFtYo.xml
  • DaHlSuDn.xml
  • qxm7NIJo.xml
  • f9XCB1E7.xml
  • hNinpiAC.xml
  • 1lKGVbXw.xml
  • RalvaqMw.xml
  • NRgVHT9h.xml
  • 8Ds5n9BT.xml
  • I3f6PKEA.xml
  • oH1WAUh7.xml
  • 0qSWJvAB.htm
  • RrXANr6a.htm
  • JKPV9dQb.htm
  • 6ROkdV6X.htm
  • flYyCEkg.htm
  • iRYKEa9Q.htm
  • cDHBgAGU.htm
  • 7oqsS1eZ.htm
  • 4IYWLjw2.htm
  • 2BJZPrL0.htm
  • M5ffLzXj.htm
  • m1MPy78u.htm
  • tm2u1WDa.htm
  • HK4UZEwC.htm
  • rGXiv9TA.htm
  • cxbRU1bk.htm
  • rpuNZg1N.htm
  • 4ioDB9Yz.htm
  • u4274HRg.htm
  • oUBsbwnO.htm
  • LPTRJVyX.htm
  • zG3hNnE2.htm
  • UurbjR1o.htm
  • FzxrGQe1.htm
  • 3FwQKztM.htm
  • nWfIu1Of.htm
  • 1xA44aLW.htm
  • H8xufSlP.htm
  • 9YUQI1dy.htm
  • xouLRsc4.htm
  • fwnrNTKF.htm
  • 6jwhJIAn.htm
  • 5mykvfK0.htm
  • JOrvjjsO.htm
  • COmpdU7i.htm
  • byiBssjX.htm
  • 9BrhdkAP.htm
  • Of8ZC4i2.htm
  • oJAPaiqV.htm
  • Cwrb8Aoo.htm
  • NnYlFYzJ.htm
  • RgaIvqgW.htm
  • t1TGMjfo.htm
  • FStVfGky.htm
  • 4tJPqWul.htm
  • CcpJfnIE.htm
  • hYbLXJtf.htm
  • D9OVHBLJ.htm
  • eB1skeLB.htm
  • 84Z8t9ql.htm
  • NiTYlK63.htm
  • fukU9ZSX.htm
  • rRbEHTT0.htm
  • YdKUifir.htm
  • jSOfxsFx.htm
  • dUWVhkeM.htm
  • zlOcflvt.htm
  • XcwpbXAQ.htm
  • vBzI2GTf.htm
  • nBl4WoUV.htm
  • 1WmIJxNN.htm
  • leaKkTch.htm
  • qZ7HfuPy.htm
  • ZQWtqT3b.htm
  • SpXj1vFj.htm
  • rYbLWbac.htm
  • vW07eFRW.htm
  • lV1WHNKh.htm
  • kttbtbR1.htm
  • 6OYfYB5L.htm
  • o6CA0aC1.htm
  • rFyTalRv.htm
  • dthoPm8s.htm
  • rZuHa4Ye.htm
  • ak7n0isM.htm
  • fmr0ck6d.htm
  • Dd5O6zdE.htm
  • dCGEAjMp.htm
  • C6C1ZNOg.htm
  • HXbHq9tQ.htm
  • W2dD4HlV.htm
  • yQDqUIhU.htm
  • zst8sDjj.htm
  • EZqMrNTC.htm
  • zlhDFbkb.htm
  • R9O0FuWk.htm
  • 8QCQyaKB.htm
  • 81oNRNLK.htm
  • 2AsImmiI.htm
  • p6WF5AsX.htm
  • YEg1DJG1.htm
  • OMoCby4S.htm
  • MxuAbQts.htm
  • awqJTUzE.htm
  • mj0tRRGm.htm
  • k6MIuXQY.htm
  • bOhOKCDY.htm
  • YNEaBwJS.htm
  • bUjRnKNl.htm
  • F5gJUCpN.htm
  • rNbNYbB8.htm
  • yoJElRrG.htm
  • 5J1Rg44M.htm
  • 0OPG6XIZ.htm
  • yPRZ0rKv.htm
  • KZdvOrwZ.htm
  • MEygBJsv.htm
  • Mq5Tgvv2.htm
  • iErhuSWY.htm
  • kHaYrQNx.htm
  • mKVJOhHB.htm
  • 1JK0TxwF.htm
  • epl6VYqc.htm
  • cYVXHFE2.htm
  • kycY2U8v.htm
  • uKUkRJk0.htm
  • nqMFXKVL.htm
  • o1qC0UUJ.htm
  • By8YKYWY.htm
  • X8a95Zc1.htm
  • 1uQLPd1k.htm
  • AhwSSvQO.htm
  • Qjbne2Ex.htm
  • auYdnG6C.htm
  • go98AeB3.htm
  • A4h1oj3K.htm
  • LUOaWHe7.htm
  • q7lA4MY8.htm
  • bM1PQDda.htm
  • lm9bL6x4.htm
  • 9qX9dsDD.htm
  • hIomAlXZ.htm
  • o3qfHrrf.htm
  • R2Yu250D.htm
  • w3NUBPQ2.htm
  • SP38c2cs.htm
  • vsAdCq4U.htm
  • sK4z0jpB.htm
  • hLosmjkJ.htm
  • jWl76Jd8.htm
  • SNbRh0qK.htm
  • 0aVOKWX1.htm
  • UXuDuFc3.htm
  • 4HZB7RyF.htm
  • ovpvClV3.htm
  • d20wUdSh.htm
  • mXwbtwaM.htm
  • l1oykMjC.htm
  • aNH6FniW.htm
  • l9wKjkpj.htm
  • EGGw7aU8.htm
  • R6SDvEWb.htm
  • W0HtjyBo.htm
  • ZKLHfqRu.htm
  • ksk7fvgn.htm
  • UMGSouys.htm
  • 2dClrs3G.htm
  • gehQNYQp.htm
  • YkQ0UPn0.htm
  • BcHV7fjq.htm
  • 3VTpdocP.htm
  • 3ow0ZRdp.htm
  • uYm6leYS.htm
  • 1AhlS2GF.htm
  • FNXsToqA.htm
  • coy6m0MG.htm
  • Pe9y0sJB.htm
  • crYsJAVP.htm
  • Bs1KO5Xl.htm
  • zUH3DTbc.htm
  • 4ROi0CLC.htm
  • LyDeQKjX.htm
  • 6z3qjFIi.htm
  • rFYLsq4e.htm
  • bnQLA2mJ.htm
  • mwWqb0ya.htm
  • ucVh8vXb.htm
  • f3kLsRKb.htm
  • kxCV1jCC.htm
  • iLjVTHNu.htm
  • mgZK6Ezd.htm
  • jdnzkRdG.htm
  • HBLN3vjV.htm
  • ojKpEVRd.htm
  • 1CykBOQk.htm
  • 0L6uEayr.htm
  • KkhRGTS0.htm
  • PX3Xfuw7.htm
  • 8jEoVN9U.htm
  • nCxq41V3.htm
  • A8KJTbWu.htm
  • YQcvpr6B.htm
  • Lt5k8l9l.htm
  • bDrbt7a8.htm
  • aK1nVugv.htm
  • YqiHPohq.htm
  • C1lKuV76.htm
  • OAdN1h0f.htm
  • s4pk0p2r.htm
  • Sn18M8Vn.htm
  • Gf85IaYl.htm
  • pangip.bat
  • begirnagir.htp
  • solt.html
  • poki65.pik
  • ipconfig.txt

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.300

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Identify and delete files detected as TROJ_MADI.AD using either the Startup Disk or Recovery Console

[ Learn More ]

Step 3

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    • Taskman = "{malware path and file name}"

Step 4

Search and delete these components

[ Learn More ]
There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • first.dll
  • 90Hkado.xls
  • 2XbWEzZ.xls
  • Wh6h1lt.xls
  • xRmxExx.xls
  • YDcLrQt.xls
  • VvGv6QJ.xls
  • pu0Rjvz.xls
  • 3EnYvXs.xls
  • lh1kVgY.xls
  • DgZCYJx.xls
  • kuuysU7.xls
  • iGNDrmk.xls
  • NQylVxS.xls
  • BRE10TQ.xls
  • hkvHPxv.xls
  • r1cEpON.xls
  • PWrzPOW.xls
  • wdqA4Qx.xls
  • sy4dN6S.xls
  • zEPvyCk.xls
  • MTrQdFg.xls
  • XHfI2xs.xls
  • Vykxh8C.xls
  • Ga7Oq0R.xls
  • MRr773t.xls
  • XKWNw3B.xls
  • Q0mRlc0.xls
  • 2Zv7ZEm.xls
  • XS4ZuAH.xls
  • 1llTNAu.xls
  • LLsePLI.xls
  • wO0ziNY.xls
  • OnotWyy.xls
  • DtjzhQr.xls
  • rqS7Pnt.xls
  • kvwUKy7.xls
  • SOmS7To.xls
  • Qw706by.xls
  • jor3Wqe.xls
  • IHVdzOi.xls
  • IIoG3Cl.xls
  • tnyoWcw.xls
  • AXAchM2.xls
  • 2I2vGDR.xls
  • MMZ0yN7.xls
  • c1ETBJ8.xls
  • 7AtAD9y.xls
  • 1iBL1R6.xls
  • rfK6V3Y.xls
  • apBifzl.xls
  • OeNQDqc.xls
  • Qm9O80.Exe
  • y4Scgp.Exe
  • hg4Mpw.Exe
  • zRD4TQ.Exe
  • Zb0jsc.Exe
  • 57omwF.Exe
  • XdfUNB.Exe
  • Zb6C6L.Exe
  • rvvgah.Exe
  • wndbyV.Exe
  • YY0fKd.Exe
  • CYT9gB.Exe
  • kjpgbu.Exe
  • ux9cjm.Exe
  • aSoviB.Exe
  • RNeNnD.Exe
  • ucFYmM.Exe
  • jmhTMG.Exe
  • EF2mOb.Exe
  • Ks3t6c.Exe
  • hpMOIZ.Exe
  • Pb1U0c.Exe
  • eXAUXQ.Exe
  • OjLfEg.Exe
  • 3oZWCA.Exe
  • v8XdL5.Exe
  • bMDwtS.Exe
  • GMQUl2.Exe
  • AMEdfi.Exe
  • og01yw.Exe
  • Q4DoTl.Exe
  • dgwmUW.Exe
  • KOyoys.Exe
  • zUvzid.Exe
  • r79tJ0.Exe
  • kEKpUi.Exe
  • u7ClUU.Exe
  • 7C4HPf.Exe
  • x2hMZI.Exe
  • PHxR6a.Exe
  • EgzM5e.Exe
  • J6XkCh.Exe
  • 0puAbD.Exe
  • La91TF.Exe
  • Sh64ZW.Exe
  • MeiGEx.Exe
  • ZVYLyS.Exe
  • lNNbgn.Exe
  • E6nYS5.Exe
  • wcew02.Exe
  • EHzvoY.Exe
  • V6g7VcxUK.dll
  • OzA9ob6QD.dll
  • mGH7IHsS7.dll
  • q3YP6v0JD.dll
  • lJOHyCzzX.dll
  • k9PMzTHB8.dll
  • FOPAgeZ8Y.dll
  • jFkvtFQq7.dll
  • nkkqPuzjK.dll
  • FSpDyX9ci.dll
  • gK5fbb08h.dll
  • IM21diYma.dll
  • 81GKgfYTN.dll
  • 6JAHaP0RZ.dll
  • 5AN0UdhBA.dll
  • ruPktXvT7.dll
  • OZabyXDC1.dll
  • ji8Mo8bmk.dll
  • s1pZFytzc.dll
  • TFZOx1mLf.dll
  • 1mmzROSem.dll
  • Lh3IS00F7.dll
  • 7IX5gDtSv.dll
  • IY0iYPqMf.dll
  • LAMLx6eYe.dll
  • gLHaWyNkd.dll
  • vqUbBxAo8.dll
  • OuIUKX6AE.dll
  • 4bfiewUwo.dll
  • b4RB8liyR.dll
  • 63nBDvPzs.dll
  • PZn8uq9R3.dll
  • i24zBWP5W.dll
  • ftHoNR0vI.dll
  • 1abtx2lxW.dll
  • W1nUgpKCq.dll
  • fkg5IGe8q.dll
  • EwXiT2hKy.dll
  • DrzgQqmEB.dll
  • fqnFpbkp4.dll
  • TfyeN3aRl.dll
  • wRR6eN5sS.dll
  • RzbgKIoOy.dll
  • UY1Arfc59.dll
  • 11orqfIkG.dll
  • JzUSM4aeO.dll
  • X5TX0650C.dll
  • ToqrxTuRq.dll
  • W9eMs0hoF.dll
  • abgJ5I9tj.dll
  • DiLBMGTjN.dll
  • EMjOZhPhB.dll
  • wtqZQvuPR.dll
  • eW818n1Ml.dll
  • C8pjpL6Di.dll
  • IMqef6GP1.dll
  • DJO1tR8lf.dll
  • W4IaV0APf.dll
  • 996yifEWs.dll
  • w9W0WWOdC.dll
  • HlslJ5XPe.dll
  • f5ajZXdD8.dll
  • mb6hFMGug.dll
  • 2k13waphJ.dll
  • j3AvrcZmm.dll
  • 64Xs6FdkB.dll
  • cLpmKTF9l.dll
  • OezPY4Dv9.dll
  • GnSnzojKN.dll
  • zxaUaKYZt.dll
  • sPxI8Kwrk.dll
  • zzfrzc4bx.dll
  • va5977mWz.dll
  • RKk4LSFo9.dll
  • lz0OrMh4k.dll
  • 5jqJYOG2N.dll
  • 5WtbRuLQD.dll
  • 9r6tuzsYl.dll
  • pp2GC59np.dll
  • 825fadEA5.dll
  • bovEsilnw.dll
  • gvqDCCWUB.dll
  • 3KPY8u8Gx.dll
  • qOdIs1cyh.dll
  • 9p7A6RHP1.dll
  • w0EwXxNgv.dll
  • lrgCOaJ8e.dll
  • EY06cSfz5.dll
  • SVuCFOock.dll
  • SuZJ98xdN.dll
  • rmn1P8g0N.dll
  • dPGTd4KfO.dll
  • rxJOATE4N.dll
  • J6Y8WBftX.dll
  • 6VdkonAv9.dll
  • SxcL6BKlk.dll
  • 3PZunTdL0.dll
  • 9HVxV3clw.dll
  • HUiknQvei.dll
  • p6gqxTXo7.dll
  • j4BDkCSpo.dll
  • OgzCDrRB3.dll
  • c8gQHiI2v.dll
  • aH4m1Bncm.dll
  • 4IqEyRtZ0.dll
  • REmE9zcNM.dll
  • PFhe1ADZO.dll
  • h6zeNXuEc.dll
  • s3p05xPkd.dll
  • wHIPXSAEq.dll
  • JBIoNFQHv.dll
  • Hh9pZ196m.dll
  • oJRTogG9l.dll
  • Hs3lsNGWa.dll
  • bD2xa5w5T.dll
  • rXn040kif.dll
  • REA8jHgNG.dll
  • xVLhBrUQK.dll
  • JWH6l6ZgI.dll
  • iYcMDld15.dll
  • 84cpwwbQj.dll
  • SuvUBntgr.dll
  • tkcZn1whW.dll
  • XnfiY10Le.dll
  • zbC1U4bWT.dll
  • axdK9keiO.dll
  • P9z6dZ4jU.dll
  • SAX1ILQgz.dll
  • shxLGgZz7.dll
  • 4ZRFfDcdS.dll
  • gmaOQTdho.dll
  • sIdHsuivF.dll
  • OoxhHmCt5.dll
  • OjqWKPHlS.dll
  • r8KALUzkO.dll
  • bysZfeXc5.dll
  • Jnh0D6j76.dll
  • dsEP4EXsd.dll
  • 1hwWIZ4a0.dll
  • mxcK2Ym9e.dll
  • 6KH7IANiT.dll
  • TLhepKNWG.dll
  • JPbJrZHLl.dll
  • 50eY21573.dll
  • PC00lzmJ4.dll
  • mGYdXVK1b.dll
  • 4uc0G3L9H.dll
  • j8oz4YzOj.dll
  • UmY8QyDLU.dll
  • H72OpWOwd.dll
  • AmgpA5o0E.dll
  • nOJA7JxOK.dll
  • 0yWXzpJuY.dll
  • nZsskYEIx.dll
  • IbgiZ9X8G.dll
  • L5BlemMVw.dll
  • COoKU0yiW.dll
  • kPnQTH8Vt.dll
  • RRSxGtulM.dll
  • AualcgXpG.dll
  • g8BP9Rz5s.dll
  • ayrNRY6dC.dll
  • MVJLzJ68Z.dll
  • CmUAfOXzm.dll
  • AnagcsdtN.dll
  • WzX7RCwSW.dll
  • JZ8VxHEGd.dll
  • ecyQkWafv.dll
  • BH6StCmZQ.dll
  • HitwMbWAo.dll
  • 6RxFBH5Wj.dll
  • hOf8d3ede.dll
  • TYN1W1aZ3.dll
  • Z4HnPhL9Q.dll
  • CepXtxHQy.dll
  • 5ldBI2u0A.dll
  • rFjWe1Kj8.dll
  • e93lIjRPt.dll
  • lnu4I8nYd.dll
  • UD8FrEC7w.dll
  • V9gWATATW.dll
  • G6py64UI0.dll
  • OCk99fjQ2.dll
  • JkXfBHOvm.dll
  • 3xfCECkuH.dll
  • JwShSDYrz.dll
  • 3qkPtIuZE.dll
  • GxDTqulPY.dll
  • 8lHmcreOP.dll
  • 1gaGuASBi.dll
  • 0u0ke2dhl.dll
  • 9tQpSVnNJ.dll
  • XFOaLkhww.dll
  • TV4LsXIt2.dll
  • LIdAThpv8.dll
  • QPup2A51x.dll
  • wGUcUBJE0.dll
  • jE1gloQb9.dll
  • O3ZvKFori.dll
  • Hncdqw3De.dll
  • gy4tZ5gDK.dll
  • WnaT.txt
  • krUt.txt
  • rtrp.txt
  • a9WX.txt
  • CknT.txt
  • o1Sr.txt
  • 1SMh.txt
  • rqqs.txt
  • Dkan.txt
  • cv2D.txt
  • 3Jfe.txt
  • MoKM.txt
  • 9ydf.txt
  • KCWH.txt
  • pUwM.txt
  • cqx7.txt
  • bdal.txt
  • AJPZ.txt
  • p6l4.txt
  • RR2B.txt
  • M3rL.txt
  • n4NM.txt
  • hF9Z.txt
  • dqPM.txt
  • tbkG.txt
  • 5O71.txt
  • Ljue.txt
  • KCIm.txt
  • Fhq2.txt
  • aMrs.txt
  • Pznb.txt
  • XNrY.txt
  • lMfv.txt
  • sRm3.txt
  • YAhe.txt
  • VwpI.txt
  • taxt.txt
  • xftV.txt
  • Ftn2.txt
  • a8L6.txt
  • Byo5.txt
  • Fg5c.txt
  • B3N4.txt
  • zBvx.txt
  • Ucam.txt
  • EQsa.txt
  • KxSZ.txt
  • hFvu.txt
  • kSCO.txt
  • Vy3S.txt
  • TXf8.txt
  • Ob3INGxR.xml
  • sgUNq3nq.xml
  • 5I9Nc5qo.xml
  • kwVC7Zaz.xml
  • qLkeaPMT.xml
  • g9RjbLBD.xml
  • CqS8pxyE.xml
  • lwwYzK3l.xml
  • TefpX3lf.xml
  • xD1muHdK.xml
  • yO2xMZbK.xml
  • M8tLEo75.xml
  • dsmRHeZl.xml
  • jPPKCdBz.xml
  • KWyROksW.xml
  • raqEfu69.xml
  • Mvy3bVnN.xml
  • 1FGIN4iS.xml
  • 8sW45JOk.xml
  • MSCs2xBe.xml
  • o1UwuNAL.xml
  • wf7UAZYS.xml
  • 7GmZhYc2.xml
  • UOF1ZIbI.xml
  • 3i6xi4y4.xml
  • mkBlKi6u.xml
  • D4yFDjJw.xml
  • DgWhbDKR.xml
  • 3W2CrQQC.xml
  • iguRPLCh.xml
  • 9MeSD9sQ.xml
  • WDjK9Jsj.xml
  • HESSOTKj.xml
  • WNUpz7Bn.xml
  • CFFzhHhS.xml
  • QsoiK0gU.xml
  • tiVH7Zak.xml
  • ZppvouBj.xml
  • i9edib0f.xml
  • kqc3siZ2.xml
  • XTmuFtYo.xml
  • DaHlSuDn.xml
  • qxm7NIJo.xml
  • f9XCB1E7.xml
  • hNinpiAC.xml
  • 1lKGVbXw.xml
  • RalvaqMw.xml
  • NRgVHT9h.xml
  • 8Ds5n9BT.xml
  • I3f6PKEA.xml
  • oH1WAUh7.xml
  • 0qSWJvAB.htm
  • RrXANr6a.htm
  • JKPV9dQb.htm
  • 6ROkdV6X.htm
  • flYyCEkg.htm
  • iRYKEa9Q.htm
  • cDHBgAGU.htm
  • 7oqsS1eZ.htm
  • 4IYWLjw2.htm
  • 2BJZPrL0.htm
  • M5ffLzXj.htm
  • m1MPy78u.htm
  • tm2u1WDa.htm
  • HK4UZEwC.htm
  • rGXiv9TA.htm
  • cxbRU1bk.htm
  • rpuNZg1N.htm
  • 4ioDB9Yz.htm
  • u4274HRg.htm
  • oUBsbwnO.htm
  • LPTRJVyX.htm
  • zG3hNnE2.htm
  • UurbjR1o.htm
  • FzxrGQe1.htm
  • 3FwQKztM.htm
  • nWfIu1Of.htm
  • 1xA44aLW.htm
  • H8xufSlP.htm
  • 9YUQI1dy.htm
  • xouLRsc4.htm
  • fwnrNTKF.htm
  • 6jwhJIAn.htm
  • 5mykvfK0.htm
  • JOrvjjsO.htm
  • COmpdU7i.htm
  • byiBssjX.htm
  • 9BrhdkAP.htm
  • Of8ZC4i2.htm
  • oJAPaiqV.htm
  • Cwrb8Aoo.htm
  • NnYlFYzJ.htm
  • RgaIvqgW.htm
  • t1TGMjfo.htm
  • FStVfGky.htm
  • 4tJPqWul.htm
  • CcpJfnIE.htm
  • hYbLXJtf.htm
  • D9OVHBLJ.htm
  • eB1skeLB.htm
  • 84Z8t9ql.htm
  • NiTYlK63.htm
  • fukU9ZSX.htm
  • rRbEHTT0.htm
  • YdKUifir.htm
  • jSOfxsFx.htm
  • dUWVhkeM.htm
  • zlOcflvt.htm
  • XcwpbXAQ.htm
  • vBzI2GTf.htm
  • nBl4WoUV.htm
  • 1WmIJxNN.htm
  • leaKkTch.htm
  • qZ7HfuPy.htm
  • ZQWtqT3b.htm
  • SpXj1vFj.htm
  • rYbLWbac.htm
  • vW07eFRW.htm
  • lV1WHNKh.htm
  • kttbtbR1.htm
  • 6OYfYB5L.htm
  • o6CA0aC1.htm
  • rFyTalRv.htm
  • dthoPm8s.htm
  • rZuHa4Ye.htm
  • ak7n0isM.htm
  • fmr0ck6d.htm
  • Dd5O6zdE.htm
  • dCGEAjMp.htm
  • C6C1ZNOg.htm
  • HXbHq9tQ.htm
  • W2dD4HlV.htm
  • yQDqUIhU.htm
  • zst8sDjj.htm
  • EZqMrNTC.htm
  • zlhDFbkb.htm
  • R9O0FuWk.htm
  • 8QCQyaKB.htm
  • 81oNRNLK.htm
  • 2AsImmiI.htm
  • p6WF5AsX.htm
  • YEg1DJG1.htm
  • OMoCby4S.htm
  • MxuAbQts.htm
  • awqJTUzE.htm
  • mj0tRRGm.htm
  • k6MIuXQY.htm
  • bOhOKCDY.htm
  • YNEaBwJS.htm
  • bUjRnKNl.htm
  • F5gJUCpN.htm
  • rNbNYbB8.htm
  • yoJElRrG.htm
  • 5J1Rg44M.htm
  • 0OPG6XIZ.htm
  • yPRZ0rKv.htm
  • KZdvOrwZ.htm
  • MEygBJsv.htm
  • Mq5Tgvv2.htm
  • iErhuSWY.htm
  • kHaYrQNx.htm
  • mKVJOhHB.htm
  • 1JK0TxwF.htm
  • epl6VYqc.htm
  • cYVXHFE2.htm
  • kycY2U8v.htm
  • uKUkRJk0.htm
  • nqMFXKVL.htm
  • o1qC0UUJ.htm
  • By8YKYWY.htm
  • X8a95Zc1.htm
  • 1uQLPd1k.htm
  • AhwSSvQO.htm
  • Qjbne2Ex.htm
  • auYdnG6C.htm
  • go98AeB3.htm
  • A4h1oj3K.htm
  • LUOaWHe7.htm
  • q7lA4MY8.htm
  • bM1PQDda.htm
  • lm9bL6x4.htm
  • 9qX9dsDD.htm
  • hIomAlXZ.htm
  • o3qfHrrf.htm
  • R2Yu250D.htm
  • w3NUBPQ2.htm
  • SP38c2cs.htm
  • vsAdCq4U.htm
  • sK4z0jpB.htm
  • hLosmjkJ.htm
  • jWl76Jd8.htm
  • SNbRh0qK.htm
  • 0aVOKWX1.htm
  • UXuDuFc3.htm
  • 4HZB7RyF.htm
  • ovpvClV3.htm
  • d20wUdSh.htm
  • mXwbtwaM.htm
  • l1oykMjC.htm
  • aNH6FniW.htm
  • l9wKjkpj.htm
  • EGGw7aU8.htm
  • R6SDvEWb.htm
  • W0HtjyBo.htm
  • ZKLHfqRu.htm
  • ksk7fvgn.htm
  • UMGSouys.htm
  • 2dClrs3G.htm
  • gehQNYQp.htm
  • YkQ0UPn0.htm
  • BcHV7fjq.htm
  • 3VTpdocP.htm
  • 3ow0ZRdp.htm
  • uYm6leYS.htm
  • 1AhlS2GF.htm
  • FNXsToqA.htm
  • coy6m0MG.htm
  • Pe9y0sJB.htm
  • crYsJAVP.htm
  • Bs1KO5Xl.htm
  • zUH3DTbc.htm
  • 4ROi0CLC.htm
  • LyDeQKjX.htm
  • 6z3qjFIi.htm
  • rFYLsq4e.htm
  • bnQLA2mJ.htm
  • mwWqb0ya.htm
  • ucVh8vXb.htm
  • f3kLsRKb.htm
  • kxCV1jCC.htm
  • iLjVTHNu.htm
  • mgZK6Ezd.htm
  • jdnzkRdG.htm
  • HBLN3vjV.htm
  • ojKpEVRd.htm
  • 1CykBOQk.htm
  • 0L6uEayr.htm
  • KkhRGTS0.htm
  • PX3Xfuw7.htm
  • 8jEoVN9U.htm
  • nCxq41V3.htm
  • A8KJTbWu.htm
  • YQcvpr6B.htm
  • Lt5k8l9l.htm
  • bDrbt7a8.htm
  • aK1nVugv.htm
  • YqiHPohq.htm
  • C1lKuV76.htm
  • OAdN1h0f.htm
  • s4pk0p2r.htm
  • Sn18M8Vn.htm
  • Gf85IaYl.htm
  • pangip.bat
  • begirnagir.htp
  • solt.html
  • poki65.pik
  • ipconfig.txt

Step 5

Scan your computer with your Trend Micro product to delete files detected as TROJ_MADI.AD. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.


Did this description help? Tell us how we did.