IM Worm.Win32.Sohanad.bm
IM Worm.Win32.Sohanad.bm is a malicious worm infection generated by cyber-criminals to install and starts other versions of malicious information on the targeted user's machine. IM Worm.Win32.Sohanad.bm will run automatically when Windows operating system boots up. Therefore, it is very difficult to manually find and remove IM Worm.Win32.Sohanad.bm. Worm.Win32.Sohanad leads to additional harm of your affected Windows system.
File System Details
IM Worm.Win32.Sohanad.bm may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %Windir%\RVHOST.exe | |
| 2. | %System%\RVHOST.exe | |
| 3. | %Windir%\Tasks\At2.job | |
| 4. | %Windir%\Tasks\At1.job | |
| 5. | %System%\setting.ini |
Registry Details
IM Worm.Win32.Sohanad.bm may create the following registry entry or registry entries:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ XTray.exe
