EHLAES.EXE – Trojan Kazy

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

EHLAES.EXE – Trojan Kazy removal

File MD5 Virus Alias
EHLAES.EXE 9ac4693b0c6958f34678226cacb190d5 Trojan Kazy
EHLAES.EXE 9ac4693b0c6958f34678226cacb190d5 Trojan SuspiciousFile
EHLAES.EXE 9ac4693b0c6958f34678226cacb190d5 Trojan Generic
EHLAES.EXE 9ac4693b0c6958f34678226cacb190d5 Rootkit ZeroAccess
EHLAES.EXE 9ac4693b0c6958f34678226cacb190d5 Trojan ZBot

EHLAES.EXE size: 165376 bytes
EHLAES.EXE hash: 9AC4693B0C6958F34678226CACB190D5

Created files:

%AppData%\Microsoft\Address Book\USER.wab
%AppData%\Nio\ehlaes.exe
%AppData%\Obo\immeer.wal

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\wuauserv\Start: 04000000

Detected by UnHackMe:

EHLAES.EXE
Default location: %APPDATA%\NIO\EHLAES.EXE

Dropper information:
MD5: 9b0f070a0b7cef38ed69899c618361d8
File size: 165376 bytes

Leave a Reply