Solved! Use GOODSB.DLL (Trojan OnLineGames) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

GOODSB.DLL – Trojan OnLineGames removal

FileMD5Virus Alias
GOODSB.DLL b420377ac3a47d9a7dc593a3fa1a4f7f Trojan OnLineGames
GOODSB.DLL b420377ac3a47d9a7dc593a3fa1a4f7f Trojan Generic
GOODSB.DLL b420377ac3a47d9a7dc593a3fa1a4f7f Trojan Eldorado
GOODSB.DLL b420377ac3a47d9a7dc593a3fa1a4f7f Trojan Agent

GOODSB.DLL size: 65024 bytes
GOODSB.DLL hash: B420377AC3A47D9A7DC593A3FA1A4F7F

Created files:

%SysDir%\drivers\500e86be.sys
%SysDir%\goodsb.dll
%Temp%\eYjiU.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\500e86be\Type: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\Start: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\DisplayName: 500e86be
HKLM\System\CurrentControlSet\Services\500e86be\ImagePath: \??\%WinDir%\System32\drivers\500e86be.sys

Detected by UnHackMe:

GOODSB.DLL
Default location: %SYSDIR%\GOODSB.DLL

Dropper information:
MD5: 0fbf6a3132d2e438d7b7662b1b27cd71
File size: 234827 bytes

Leave a Reply