Solved! Use UOAQSCQ.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

UOAQSCQ.EXE – Trojan Artemis removal

File MD5 Virus Alias
UOAQSCQ.EXE 8b161c9970c7e47f3128ee014f098f01 Trojan Artemis
UOAQSCQ.EXE 8b161c9970c7e47f3128ee014f098f01 Trojan SuspiciousFile
UOAQSCQ.EXE 8b161c9970c7e47f3128ee014f098f01 Trojan Generic
UOAQSCQ.EXE 8b161c9970c7e47f3128ee014f098f01 Rootkit TDSS
UOAQSCQ.EXE 8b161c9970c7e47f3128ee014f098f01 Trojan Agent

UOAQSCQ.EXE size: 61440 bytes
UOAQSCQ.EXE hash: 8B161C9970C7E47F3128EE014F098F01

Created files:

%WinDir%\Uoaqscq.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\MarkTime: 2014-11-18 07:46
HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\DisplayName: Krukbw oredxonl
HKLM\System\CurrentControlSet\Services\Wsyxsr qobhnlln\ImagePath: %WinDir%\Uoaqscq.exe

Detected by UnHackMe:

UOAQSCQ.EXE
Default location: %WinDir%\UOAQSCQ.EXE

Dropper information:
MD5: 8b161c9970c7e47f3128ee014f098f01
File size: 61440 bytes

Leave a Reply