Solved! Use 500E86BE.SYS (Trojan OnLineGames) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

500E86BE.SYS – Trojan OnLineGames removal

File MD5 Virus Alias
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan OnLineGames
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Artemis
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Generic
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Eldorado
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan CI
500E86BE.SYS f4aa145cb9d80a02430b62f0fd13726b Trojan Barys

500E86BE.SYS size: 22624 bytes
500E86BE.SYS hash: F4AA145CB9D80A02430B62F0FD13726B

Created files:

%SysDir%\drivers\500e86be.sys

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\500e86be\Type: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\Start: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\500e86be\DisplayName: 500e86be
HKLM\System\CurrentControlSet\Services\500e86be\ImagePath: \??\%WinDir%\System32\drivers\500e86be.sys

Detected by UnHackMe:

500E86BE.SYS
Default location: %SYSDIR%\DRIVERS\500E86BE.SYS

Dropper information:
MD5: 0f9ff5c9883ae7004216e9879bb647f6
File size: 234827 bytes

Leave a Reply