@ – Rootkit ZeroAccess

November 12, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Kryptik
@	Trojan Birele
@	Trojan FakeAV
@	Trojan Agent
@	Trojan Crypt

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 7f31936c4cc17e97859ed130ff6cf76575dcfad0efd6bc77c1410dd15fb4445d
SHA1: 42b3d7f1af008454e16ab2874c3c913b619f7761
MD5: 13c46a82472a0234b3c9fa313ef489f6
File size: 203264 bytes

@ – Rootkit ZeroAccess

November 9, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Graftor
@	Trojan Agent
@	Trojan Downloader
@	Trojan Generic

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 91655e45ddb2ff580ea6612186eec1b9222e638e40bea9904b4a1f2c2e26c86e
SHA1: 0a2e487e154edd895dbd5b44c8c69f65ba57e689
MD5: 40b431a141a0ed13c03e011e5398299e
File size: 124928 bytes

@ – Rootkit ZeroAccess

November 8, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Downloader
@	Trojan Kazy
@	Trojan Kryptik
@	Worm AMN
@	Trojan CI

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: bcbe949be47d4ba7376fce82d2185ee0c78ea604a5c4cf931e3937164d85d1bd
SHA1: 2b8fe47981db0fb94d0ec084afb347df1d7876cf
MD5: 0d4b21f6382b304d9da4683e619a240e
File size: 174592 bytes

@ – Rootkit ZeroAccess

November 8, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Kryptik
@	Trojan Birele
@	Trojan Generic
@	Trojan Crypt
@	Trojan Agent

Created files:

%Local AppData%\{ae229ccd-6a28-e4e8-8a47-3737ee4e0fed}\@ – Rootkit ZeroAccess
%Local AppData%\{ae229ccd-6a28-e4e8-8a47-3737ee4e0fed}\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32 : %Local AppData%\{ae229ccd-6a28-e4e8-8a47-3737ee4e0fed}\n.

Detected by UnHackMe:

@
Default location: %Local AppData%\{ae229ccd-6a28-e4e8-8a47-3737ee4e0fed}\@

Dropper information:
SHA256: 7af4222705696746180447e4acccfb8d9b8884896ef77841a117d22d019f6bf6
SHA1: a211b93829bbadf8cbe9edb2a0dc44f798296e05
MD5: 0ae0b76856364b45ffffae45289b7f3f
File size: 194560 bytes

@ – Rootkit ZeroAccess

November 6, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Kazy
@	Trojan CI
@	Trojan Kryptik

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 2c9dab52a9e28dc2a488555ca1eae980ac286e5a8fdd10c8d45b3afd616ee95f
SHA1: 0b345cc1c9e19f836999574e07b76e77217d7ade
MD5: f6b49073c3731e51a52c3ee4d7e99bab
File size: 229376 bytes

@ – Rootkit ZeroAccess

November 5, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Downloader
@	Trojan Crypt
@	Trojan Generic
@	Trojan Agent
@	Trojan Kryptik

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 9d24f9f267960ec7f5ba01428332777ad3834567889aa5e3d8baf58b0ea612d7
SHA1: ebca03f32d0498700ac92ba4b5cdd3421d88719c
MD5: 37e62ae98ed5e53a44372e2c241f008c
File size: 227328 bytes

@ – Rootkit ZeroAccess

October 23, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Agent
@	Trojan Crypt
@	Trojan Generic
@	Trojan Downloader.Generic
@	Trojan Kryptik

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: d166e03ac1c635ecbeb0cd2d1bc1ccebf479e71673904e0e5bcd252e321acc85
SHA1: 945aaf7309aee7a39638d504ba01ec7e8bc79124
MD5: 2938b5f9a5ca3697074592e9198a6730
File size: 220672 bytes

@ – Rootkit ZeroAccess

October 23, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Downloader.Generic
@	Trojan Kryptik
@	Trojan CI
@	Trojan Agent
@	Trojan Generic.KD

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 70848290532c34afbc0db21ed69239ed42ac6078000639143080573f7df27ab9
SHA1: 4de5e1533d65c5aa1a56d0d219c8128c63424af3
MD5: 0d84a07cb1e490ebc54f0a7ad434fd93
File size: 173056 bytes

@ – Rootkit ZeroAccess

October 23, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan DNAScan
@	Trojan Kazy
@	Trojan Crypt
@	Trojan Kryptik
@	Trojan Generic

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: c0c86fbba8bd3672b8c8fad59c693ff4dc7b3a339bb577644061a8eb0ce0d65c
SHA1: c92bbbb9356339688057340617c00e344d9f1cee
MD5: 139e808d9dd783687e3f8528cca98f93
File size: 236032 bytes

@ – Rootkit ZeroAccess

October 23, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Kryptik
@	Trojan Downloader.Generic
@	Trojan Kazy
@	Trojan Generic
@	Trojan CI

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 74a7d505f162fba4c468e02024e6ab7e2a834af2faaedfe784a7e7ac3e247046
SHA1: 0dbe3ab9d86c30c887c586f6c1f80d40a23c5173
MD5: 06f0c2cd42e50de6165ba6353eb9e95c
File size: 178176 bytes

@ – Rootkit ZeroAccess

October 17, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: c71818b557eb1de0ec67a72f24d6878d6e7e5629f618821e5446a7af8e26df3a
SHA1: 1232899df1f2c5a87a680c36b20e9dab25fbd6bf
MD5: e243c227ed64ee124a9bee8cc30bc1e7
File size: 166913 bytes

@ – Rootkit ZeroAccess

October 13, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Generic.KD
@	Trojan Generic
@	Trojan Agent
@	Trojan Downloader.Generic
@	Trojan Kryptik

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 3655fc29b49d9a735c351005d1cbeedb66c7d94c13c9683aee1b569decf76c5d
SHA1: aee48db996abcac458d911d623a0d759b4d812f1
MD5: 3d4d4df6dc50c84361fe0dcf47630dfc
File size: 165376 bytes

@ – Rootkit ZeroAccess

October 13, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess
@	Trojan Kryptik
@	Trojan Generic
@	Trojan Kazy
@	Trojan Downloader.Generic
@	Trojan Agent

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 83e64de950f56274dd186b8e746648a48f32bdd1f6af69c16e529e6c6abf6067
SHA1: ed7ec01a64467b9c4b697de3f625336c4fad7229
MD5: 6d3a6efa5bae35aa1dda1d0b783df194
File size: 166912 bytes

@ – Rootkit ZeroAccess

September 28, 2012

Alex NightWatcher

Rootkits No Comments

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.

@ – Rootkit ZeroAccess removal

File	Virus Alias
@	Rootkit ZeroAccess

Created files:

C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@ – Rootkit ZeroAccess
C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n – Rootkit ZeroAccess

Autostart registry keys:

HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32\ThreadingModel: Both
HKCU\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InprocServer32 : C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\n.

Detected by UnHackMe:

@
Default location: C:\RECYCLER\S-1-5-21-515967899-854245398-1708537768-1003\$ae229ccd6a28e4e88a473737ee4e0fed\@

Dropper information:
SHA256: 85de1349cc66161444b2bdd16d3b7f2f297f8275cb69a59172acdc2be67feed5
SHA1: 135429ae547525c8c649f9e9824d2cb23f3d7290
MD5: 2a54c63c482da9d49ffc6b69e4abcc6f
File size: 160256 bytes