Solved! Use 1067400.DLL (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

1067400.DLL – Trojan Magania removal

File MD5 Virus Alias
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Magania
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Artemis
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Generic
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Eldorado
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Downloader
1067400.DLL 96360cb1244474d4e6f52c66a0d49068 Trojan Barys

1067400.DLL size: 71168 bytes
1067400.DLL hash: 96360CB1244474D4E6F52C66A0D49068

Created files:

C:\1067400.dll
%Program Files%\Cxya\Hxyabcdef.psd

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\RemoteAccess\RouterManagers\Ip\DLLPath: 43003A005C0031003000360037003400300030002E0064006C006C000000
HKLM\System\CurrentControlSet\Services\Wxyabc Efghijkl Nop\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wxyabc Efghijkl Nop\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wxyabc Efghijkl Nop\DisplayName: Wxyabc Efghijkl Nopqrstu Wxya
HKLM\System\CurrentControlSet\Services\Wxyabc Efghijkl Nop\ImagePath: %SystemRoot%\System32\svchost.exe -k imgsvc

Detected by UnHackMe:

1067400.DLL
Default location: C:\1067400.DLL

Dropper information:
MD5: d20acb849af27c3ace29c2ef4b79fb79
File size: 40463 bytes

Leave a Reply