I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
WIAEEU.EXE – Backdoor Nitol removal
| File | MD5 | Virus Alias |
|---|---|---|
| WIAEEU.EXE | d0b881d28c2497460f1aad8ecfaf24e1 | Backdoor Nitol |
| WIAEEU.EXE | d0b881d28c2497460f1aad8ecfaf24e1 | Trojan Artemis |
| WIAEEU.EXE | d0b881d28c2497460f1aad8ecfaf24e1 | Virus Sality |
| WIAEEU.EXE | d0b881d28c2497460f1aad8ecfaf24e1 | Trojan Banker |
WIAEEU.EXE size: 27136 bytes
WIAEEU.EXE hash: D0B881D28C2497460F1AAD8ECFAF24E1
Created files:
%SysDir%\hra33.dll
%WinDir%\wiaeeu.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\.Net CLR\Type: 10010000
HKLM\System\CurrentControlSet\Services\.Net CLR\Start: 02000000
HKLM\System\CurrentControlSet\Services\.Net CLR\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\.Net CLR\DisplayName: Microsoft .Net Framework COM+ Support
HKLM\System\CurrentControlSet\Services\.Net CLR\ImagePath: %WinDir%\wiaeeu.exe
HKLM\System\CurrentControlSet\Services\.Net CLR\Description: Microsoft .NET COM+ Integration with SOAP
Detected by UnHackMe:
WIAEEU.EXE
Default location: %WinDir%\WIAEEU.EXE
Dropper information:
MD5: d0b881d28c2497460f1aad8ecfaf24e1
File size: 27136 bytes