Solved! Use 500E86BE.SYS (Trojan OnLineGames) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

500E86BE.SYS – Trojan OnLineGames removal

File MD5 Virus Alias
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan OnLineGames
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Artemis
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Generic
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Eldorado
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan CI
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Barys

500E86BE.SYS size: 22624 bytes
500E86BE.SYS hash: F4AA145CB9D80A02430B62F0FD13726B

Created files:

%SysDir%\drivers\500e86be.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\500e86be\Type: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\Start: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\DisplayName: 500e86be
HKLM\System\CurrentControlSet\Services\500e86be\ImagePath: \??\%WinDir%\System32\drivers\500e86be.sys

Detected by UnHackMe:

500E86BE.SYS
Default location: %SYSDIR%\DRIVERS\500E86BE.SYS

Dropper information:
MD5: 0f9ff5c9883ae7004216e9879bb647f6
File size: 234827 bytes

Leave a Reply