Solved! Use MLCMS3D.DLL (Trojan Hiloti) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MLCMS3D.DLL – Trojan Hiloti removal

File MD5 Virus Alias
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan Hiloti
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan SuspiciousFile
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan Generic
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan Downloader
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan Mufanom
MLCMS3D.DLL be60099ceffb0aece0bc0c52998e9d65 Trojan Krap

MLCMS3D.DLL size: 105472 bytes
MLCMS3D.DLL hash: BE60099CEFFB0AECE0BC0C52998E9D65

Created files:

%WinDir%\mlcms3d.dll
%UserProfile%\B85EgtCQKi4p6Z9Kt2.exe
%UserProfile%\cof.exe
%UserProfile%\cog.exe
%UserProfile%\wgmul.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Nbuferez: rundll32.exe “%WinDir%\mlcms3d.dll”,Startup
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\wgmul: %UserProfile%\wgmul.exe /D

Detected by UnHackMe:

MLCMS3D.DLL
Default location: %WinDir%\MLCMS3D.DLL

Dropper information:
MD5: 2dd6d7427d3db34271048592d4d74df3
File size: 737228 bytes

Leave a Reply