HAO123INST.EXE – Trojan Click

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

HAO123INST.EXE – Trojan Click removal

FileMD5Virus Alias
HAO123INST.EXE 71d6bb4f47023dc3b6262cbb52cecae0 Trojan Click

HAO123INST.EXE size: 375944 bytes
HAO123INST.EXE hash: 71D6BB4F47023DC3B6262CBB52CECAE0

Created files:

%AppData%\baidu\hao123-ar\%APPDATA%\baidu\hao123-ar\hao123.1.0.0.1106.exe
%AppData%\baidu\hao123-ar\hao123inst.exe
%AppData%\baidu\hao123-ar\Setting.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\hao123Setting: %WinDir%\System32\config\Systemprofile\Application Data\baidu\hao123-ar\Setting.exe

Detected by UnHackMe:

HAO123INST.EXE
Default location: %APPDATA%\BAIDU\HAO123-AR\HAO123INST.EXE

Dropper information:
MD5: 719c1aa06d113c73124a5bd890ca14fb
File size: 504864 bytes

Leave a Reply