Solved! Use ZBBEXGA.EXE (Trojan OnLineGames) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

ZBBEXGA.EXE – Trojan OnLineGames removal

File MD5 Virus Alias
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan OnLineGames
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan SuspiciousFile
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan Artemis
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan Generic
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan Eldorado
ZBBEXGA.EXE a536a9a7abe199bbd2daea45cce0e87b Trojan Downloader

ZBBEXGA.EXE size: 38984 bytes
ZBBEXGA.EXE hash: A536A9A7ABE199BBD2DAEA45CCE0E87B

Created files:

%WinDir%\Zbbexga.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\MarkTime: 2014-11-17 23:03
HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\DisplayName: Eucmgy sgkwkqio
HKLM\System\CurrentControlSet\Services\Wscssy ooiegiyq\ImagePath: %WinDir%\Zbbexga.exe

Detected by UnHackMe:

ZBBEXGA.EXE
Default location: %WinDir%\ZBBEXGA.EXE

Dropper information:
MD5: a536a9a7abe199bbd2daea45cce0e87b
File size: 38984 bytes

Leave a Reply