.exe file with harmful material (help)

[peter22342]

Hi,
i bought an ahk script which was saved as an .exe file
my friend told me to scan it and this came up
Virus-Total-Google-Chrome-03-11-2020-02-43-48
does anyone know if i need to be worried

 

Hi, yeah there's no reason for an ahk script to be made into a .exe

Looks malicious and it's likely bound with a RAT/keylogger

Did you run the file?

 

[peter22342]

i did i have been using it for the last few day.
im worried
what should i do

 

[peter22342]

i have run a basic free anti virus scan with malwarebytes but nothing so far, im worried its bypassed it

 

Delete this file:

Files Written

• 
  C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\UPnP Device Host\upnphost\udhisapi.dll

Delete this registry key (used to maintain persistence):

Registry Keys Set
HKLM\SOFTWARE\Microsoft\Windows Media Player NSS\3.0\Servers\A70D59A1-8EAD-4F40-AAAB-FBFC460800A4\FriendlyName

After that, do a system restore to a point before you started using the program.

Then do a check if the file/key are still there, if they're not you should be fine

Change any saved passwords you might have on your browser and run another scan with malware bytes

 

[FakeGP]

Any AHK script that the scripter is claiming he made for you, should not be .exe format. With that being said... Could potentially be a keylogger, or a RAT which is worse. Be careful!