Solved! Use FOBEKA.EXE (Trojan StartPage) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

FOBEKA.EXE – Trojan StartPage removal

File MD5 Virus Alias
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Trojan StartPage
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Trojan XPACK
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Trojan Eldorado
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Backdoor Hupigon
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Trojan Siggen
FOBEKA.EXE 16a11eee5b66798df236ba4f066ba795 Trojan Agent

FOBEKA.EXE size: 88576 bytes
FOBEKA.EXE hash: 16A11EEE5B66798DF236BA4F066BA795

Created files:

%WinDir%\srchasstsss\Fobeka.exe
%WinDir%\srchasstsss\Fobeka.vbs
%WinDir%\srchasstsss\V3like.vbs

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run : VirusShare_3acae02fcb29940d3473010c8a2a9cbd.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\syotom: %WinDir%\srchasstsss\Fobeka.exe

Detected by UnHackMe:

FOBEKA.EXE
Default location: %WinDir%\SRCHASSTSSS\FOBEKA.EXE

Dropper information:
MD5: 3acae02fcb29940d3473010c8a2a9cbd
File size: 318464 bytes

Leave a Reply