Solved! Use PGLJGO.EXE (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

PGLJGO.EXE – Trojan Magania removal

File MD5 Virus Alias
PGLJGO.EXE f3bd28b3faddd94f871fe798e56c6160 Trojan Magania
PGLJGO.EXE f3bd28b3faddd94f871fe798e56c6160 Trojan Generic
PGLJGO.EXE f3bd28b3faddd94f871fe798e56c6160 Trojan Downloader
PGLJGO.EXE f3bd28b3faddd94f871fe798e56c6160 Trojan Kryptik
PGLJGO.EXE f3bd28b3faddd94f871fe798e56c6160 Trojan Crypt

PGLJGO.EXE size: 688148 bytes
PGLJGO.EXE hash: F3BD28B3FADDD94F871FE798E56C6160

Created files:

%SysDir%\pgljgo.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Defghi Klmnopqr Tuv\Type: 10010000
HKLM\System\CurrentControlSet\Services\Defghi Klmnopqr Tuv\Start: 02000000
HKLM\System\CurrentControlSet\Services\Defghi Klmnopqr Tuv\DisplayName: Defghi Klmnopqr Tuvwxyab Defg
HKLM\System\CurrentControlSet\Services\Defghi Klmnopqr Tuv\ImagePath: %WinDir%\System32\pgljgo.exe
HKLM\System\CurrentControlSet\Services\Defghi Klmnopqr Tuv\Description: Defghi Klmnopqr Tuvwxyab Defg

Detected by UnHackMe:

PGLJGO.EXE
Default location: %SYSDIR%\PGLJGO.EXE

Dropper information:
MD5: f3bd28b3faddd94f871fe798e56c6160
File size: 688148 bytes

Leave a Reply