Solved! Use UPDATE.EXE (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

UPDATE.EXE – Trojan Magania removal

File MD5 Virus Alias
UPDATE.EXE 7c7c35fc590b1c26ff032e3878a1e8a8 Trojan Magania
UPDATE.EXE 7c7c35fc590b1c26ff032e3878a1e8a8 Trojan Artemis
UPDATE.EXE 7c7c35fc590b1c26ff032e3878a1e8a8 Trojan CI
UPDATE.EXE 7c7c35fc590b1c26ff032e3878a1e8a8 Trojan Agent
UPDATE.EXE 7c7c35fc590b1c26ff032e3878a1e8a8 Backdoor Farfli

UPDATE.EXE size: 110592 bytes
UPDATE.EXE hash: 7C7C35FC590B1C26FF032E3878A1E8A8

Created files:

%SysDir%\update.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\BITS\Group: Default
HKLM\System\CurrentControlSet\Services\DirectX ufo\Type: 10010000
HKLM\System\CurrentControlSet\Services\DirectX ufo\Start: 02000000
HKLM\System\CurrentControlSet\Services\DirectX ufo\DisplayName: DirectX Remover lcg for Windows(R).
HKLM\System\CurrentControlSet\Services\DirectX ufo\ImagePath: %WinDir%\System32\update.exe

Detected by UnHackMe:

UPDATE.EXE
Default location: %SYSDIR%\UPDATE.EXE

Dropper information:
MD5: 7c7c35fc590b1c26ff032e3878a1e8a8
File size: 110592 bytes

Leave a Reply