Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'EXU' = '<SYSTEM32>\ExU.exe -r'
- '<SYSTEM32>\ExU.exe' -d:<Full path to virus> -r
- <SYSTEM32>\ExU.exe
- '17#.#39.141.122':1983
The page may not load correctly.
Added to the Dr.Web virus database: 2014-05-12
Virus description added: 2014-05-13
Download by serial number
Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.
After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.
Download by serial number
Doctor Web is a cybersecurity company focused on threat detection, prevention and response technologies