Solved! Use GCUYOOU.EXE (Trojan Downloader) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

GCUYOOU.EXE – Trojan Downloader removal

File MD5 Virus Alias
GCUYOOU.EXE b3f483ea05cea196d6892982168ca31b Trojan Downloader
GCUYOOU.EXE b3f483ea05cea196d6892982168ca31b Trojan Buzus
GCUYOOU.EXE b3f483ea05cea196d6892982168ca31b Trojan Magania
GCUYOOU.EXE b3f483ea05cea196d6892982168ca31b Trojan Agent

GCUYOOU.EXE size: 28672 bytes
GCUYOOU.EXE hash: B3F483EA05CEA196D6892982168CA31B

Created files:

%Program Files%\AppPatch\NetSyst69.dll
%Program Files%\Microsoft Wwmmgg\Gcuyoou.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Wsesay qucwekwe\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Wsesay qucwekwe\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wsesay qucwekwe\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wsesay qucwekwe\DisplayName: Smsqku gesoegoasoasyssseo
HKLM\System\CurrentControlSet\Services\Wsesay qucwekwe\ImagePath: %Program Files%\Microsoft Wwmmgg\Gcuyoou.exe

Detected by UnHackMe:

GCUYOOU.EXE
Default location: %PROGRAM FILES%\MICROSOFT WWMMGG\GCUYOOU.EXE

Dropper information:
MD5: b3f483ea05cea196d6892982168ca31b
File size: 28672 bytes

Leave a Reply