upmngr.exe

Last Updated on Wednesday, 29 August 2012 13:05 Wednesday, 05 October 2011 13:36

Trojan - W32.Bancos

A file by the name upmngr.exe is created by a computer virus program that affects the computers running on the Microsoft windows operating systems. It's analysis report is given below

It seems to be a Banking Trojan. It targets the users of a Mexican Bank, Banco National de Mexico website (banamex[dot]com). The virus modifies the Hosts file on the affected computer in order to redirect the requests to this Bank's website to a malicious IP address in England.  Read more about the banking virus on this page

Files found - view
C:\Windows\System32\upmngr.exe

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of upmngr.exe, and after that, search the hard disk for other files created on that date or onward. See image

Necessary steps required to remove this virus program

• To remove processes created by the virus program from the Task Manager
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found
• To remove obsolete registry keys using CCleaner