Solved! Use WIAEEU.EXE (Backdoor Nitol) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WIAEEU.EXE – Backdoor Nitol removal

FileMD5Virus Alias
WIAEEU.EXE d0b881d28c2497460f1aad8ecfaf24e1 Backdoor Nitol
WIAEEU.EXE d0b881d28c2497460f1aad8ecfaf24e1 Trojan Artemis
WIAEEU.EXE d0b881d28c2497460f1aad8ecfaf24e1 Virus Sality
WIAEEU.EXE d0b881d28c2497460f1aad8ecfaf24e1 Trojan Banker

WIAEEU.EXE size: 27136 bytes
WIAEEU.EXE hash: D0B881D28C2497460F1AAD8ECFAF24E1

Created files:

%SysDir%\hra33.dll
%WinDir%\wiaeeu.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\.Net CLR\Type: 10010000
HKLM\System\CurrentControlSet\Services\.Net CLR\Start: 02000000
HKLM\System\CurrentControlSet\Services\.Net CLR\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\.Net CLR\DisplayName: Microsoft .Net Framework COM+ Support
HKLM\System\CurrentControlSet\Services\.Net CLR\ImagePath: %WinDir%\wiaeeu.exe
HKLM\System\CurrentControlSet\Services\.Net CLR\Description: Microsoft .NET COM+ Integration with SOAP

Detected by UnHackMe:

WIAEEU.EXE
Default location: %WinDir%\WIAEEU.EXE

Dropper information:
MD5: d0b881d28c2497460f1aad8ecfaf24e1
File size: 27136 bytes

Leave a Reply