Solved! Use OCOPAK32.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

OCOPAK32.EXE – Trojan Crypt removal

File MD5 Virus Alias
OCOPAK32.EXE fdbf14d131301a7f0f6b838b2b32f91a Trojan Crypt
OCOPAK32.EXE fdbf14d131301a7f0f6b838b2b32f91a Trojan Eldorado
OCOPAK32.EXE fdbf14d131301a7f0f6b838b2b32f91a Trojan Agent

OCOPAK32.EXE size: 103424 bytes
OCOPAK32.EXE hash: FDBF14D131301A7F0F6B838B2B32F91A

Created files:

%SysDir%\Jhbnhmfq.dll
%SysDir%\Ocopak32.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe: %WinDir%\System32\ctfmon.exe

Detected by UnHackMe:

OCOPAK32.EXE
Default location: %SYSDIR%\OCOPAK32.EXE

Dropper information:
MD5: d5d73543c5f0d52b2d188de1f6059160
File size: 103424 bytes

Leave a Reply