Solved! Use HRA33.DLL (Trojan Buzus) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

HRA33.DLL – Trojan Buzus removal

File MD5 Virus Alias
HRA33.DLL d87ebe9cd4a0176d76ebc465ede791a7 Trojan Buzus
HRA33.DLL d87ebe9cd4a0176d76ebc465ede791a7 Backdoor RBot
HRA33.DLL d87ebe9cd4a0176d76ebc465ede791a7 Trojan Agent
HRA33.DLL d87ebe9cd4a0176d76ebc465ede791a7 Backdoor IRCBot
HRA33.DLL d87ebe9cd4a0176d76ebc465ede791a7 Trojan Scar

HRA33.DLL size: 8704 bytes
HRA33.DLL hash: D87EBE9CD4A0176D76EBC465EDE791A7

Created files:

%WinDir%\eeiaea.exe
%SysDir%\hra33.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\TCP Mnager Service\Type: 10010000
HKLM\System\CurrentControlSet\Services\TCP Mnager Service\Start: 02000000
HKLM\System\CurrentControlSet\Services\TCP Mnager Service\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\TCP Mnager Service\DisplayName: TCP Mnager Service
HKLM\System\CurrentControlSet\Services\TCP Mnager Service\ImagePath: %WinDir%\eeiaea.exe
HKLM\System\CurrentControlSet\Services\TCP Mnager Service\Description: TCP Mnager Service

Detected by UnHackMe:

HRA33.DLL
Default location: %SYSDIR%\HRA33.DLL

Dropper information:
MD5: d1670fec84f59ea9fe339594994c8c77
File size: 20480 bytes

Leave a Reply