HOOK.EXE – Trojan Scar removal

HOOK.EXE size: 819200 bytes
HOOK.EXE hash: C99F8E861A1ED7759FB9F9055343D333

Created files:

%WinDir%\hook.exe
%Temp%\hook.exe
%Temp%\Scripts\1 a test.elfc
%Temp%\Scripts\1 Island -2 .elfc
%Temp%\Scripts\1 Island -2.elfc
%Temp%\Scripts\1.2.3. Polis.wpt
%Temp%\Scripts\11 laguna island+depositer by St@hu.elfc
%Temp%\Scripts\Ape -2 With Depositer.elfc
%Temp%\Scripts\Ape -2.elfc
%Temp%\Scripts\Ape all(2).elfc
%Temp%\Scripts\Ape all.elfc
%Temp%\Scripts\Apes 0 Reverse.elfc
%Temp%\Scripts\Apes Ground floor_depositer.elfc
%Temp%\Scripts\Apes.elft
%Temp%\Scripts\Apes_Ground_Tower.elfc
%Temp%\Scripts\Apes_Ground_Tower.elft
%Temp%\Scripts\Arena Mutated.elfc
%Temp%\Scripts\avalanche ank.elfc
%Temp%\Scripts\Barbs.elfc
%Temp%\Scripts\barbs.elft
%Temp%\Scripts\blue djinn yalahar.elfc
%Temp%\Scripts\Bog Raiders Knight.elft
%Temp%\Scripts\Bog Raiders Paladin.elft
%Temp%\Scripts\Bogs Raiders Knight.elfc
%Temp%\Scripts\Bogs Raiders.elfc
%Temp%\Scripts\Cemetery skels.elfc
%Temp%\Scripts\Chakoya.elft
%Temp%\Scripts\Chakoyas depositer 1.elfc
%Temp%\Scripts\Chakoyas depositer 2.elfc
%Temp%\Scripts\Crystal spiders.elfc
%Temp%\Scripts\crystal spiders.elft
%Temp%\Scripts\Cults Mines NW.elfc
%Temp%\Scripts\Cults.elft
%Temp%\Scripts\cyc2ndfloor.wpt
%Temp%\Scripts\Cyclopolis – Waypoints.wpt
%Temp%\Scripts\cyclopolis targ.elft
%Temp%\Scripts\cyclopolis.elfc
%Temp%\Scripts\Cyclops Mistrock.elfc
%Temp%\Scripts\darashia dlair.elfc
%Temp%\Scripts\darashia dragons.elft
%Temp%\Scripts\DarkCathedral+items+dpGold (v1.1).elfc
%Temp%\Scripts\DarkCathedral1st.elft
%Temp%\Scripts\depo laguna.elfc
%Temp%\Scripts\Djinns Knight.elft
%Temp%\Scripts\Djinns.elft
%Temp%\Scripts\DL pally.elft
%Temp%\Scripts\Dl’s.elfc
%Temp%\Scripts\dl-e fenrock.elfc
%Temp%\Scripts\dl-e fenrock.elft
%Temp%\Scripts\dle vistera.elfc
%Temp%\Scripts\dle vistera.elft
%Temp%\Scripts\dleeeee.elft
%Temp%\Scripts\DLs Knight.elft
%Temp%\Scripts\DLs.elft
%Temp%\Scripts\dlsnoholes POI.elfc
%Temp%\Scripts\Dragi Darashia depo!.elfc
%Temp%\Scripts\Dragi darashia depo.elft
%Temp%\Scripts\Dragi Darashia.elfc
%Temp%\Scripts\dragi targeting.elft
%Temp%\Scripts\Dragi Witka).elfc
%Temp%\Scripts\dragi.elfc
%Temp%\Scripts\dragikuba.elfc
%Temp%\Scripts\Dragon Mage.elft
%Temp%\Scripts\Dragon VDL Knight.elft
%Temp%\Scripts\Dragon Yalahar.elft
%Temp%\Scripts\dragons.elft
%Temp%\Scripts\dwarfy smallll.elfc
%Temp%\Scripts\dwarfyyy small.elft
%Temp%\Scripts\Dworc Depositer – EK.elfc
%Temp%\Scripts\Dworc Depositer – Knight.elfc
%Temp%\Scripts\Dworc Depositer – Mage.elfc
%Temp%\Scripts\Dworc Depositer – Pally.elfc
%Temp%\Scripts\Dworc knight.elft
%Temp%\Scripts\Dworc mage.elft
%Temp%\Scripts\Edron Dragon Lair.elfc
%Temp%\Scripts\Edron goblins with gold and stones.elfc
%Temp%\Scripts\Edron goblins.elfc
%Temp%\Scripts\Edron goblins.elft
%Temp%\Scripts\Edron trolls with gold.elfc
%Temp%\Scripts\Edron trolls.elft
%Temp%\Scripts\femourhills_perfect.elft
%Temp%\Scripts\femourhills_perfect_allgoblins.elfc
%Temp%\Scripts\Final.elfc
%Temp%\Scripts\Frost Dragon +1.elfc
%Temp%\Scripts\Frost Dragons Quest W.elfc
%Temp%\Scripts\Frost East Up.elfc
%Temp%\Scripts\Frost Giants + Depositer.elfc
%Temp%\Scripts\Frost Giants.elft
%Temp%\Scripts\Frost HARD 180.elfc
%Temp%\Scripts\Frost hardcore 220.elfc
%Temp%\Scripts\frost mage.elft
%Temp%\Scripts\frost WEST.elfc
%Temp%\Scripts\Frosts Hard WEST 0(2).elfc
%Temp%\Scripts\Frosts Hard WEST 0.elfc
%Temp%\Scripts\Frosts Knight.elft
%Temp%\Scripts\Frosts Paladin 2.elft
%Temp%\Scripts\Frosts with just spears no san EAST UP.elfc
%Temp%\Scripts\ghaz .elfc
%Temp%\Scripts\ghaz.elft
%Temp%\Scripts\gs forbidden.elft
%Temp%\Scripts\gs island forbidden.elfc
%Temp%\Scripts\GS knight.elft
%Temp%\Scripts\GS mage.elft
%Temp%\Scripts\GS paladin.elft
%Temp%\Scripts\GS_ph_knight.elfc
%Temp%\Scripts\GS_ph_paladin.elfc
%Temp%\Scripts\gs_porthope.elfc
%Temp%\Scripts\Hidden Larvas.elfc
%Temp%\Scripts\hydra.elft
%Temp%\Scripts\hydry forbidden.elfc
%Temp%\Scripts\Ice witch tower.elfc
%Temp%\Scripts\Ice witches.elft
%Temp%\Scripts\Jungle.elft
%Temp%\Scripts\JungleMage.elft
%Temp%\Scripts\knight – mutated rat.elft
%Temp%\Scripts\Knights – Mutated Rats.elfc
%Temp%\Scripts\Laguna Island.elft
%Temp%\Scripts\laguna.elft
%Temp%\Scripts\LagunaDepositer.elfc
%Temp%\Scripts\Larvs.elft
%Temp%\Scripts\Lby Pirates ~ M45.elfc
%Temp%\Scripts\Lizard Camp.elfc
%Temp%\Scripts\Lizards.elft
%Temp%\Scripts\Lizards_depositer.elfc
%Temp%\Scripts\Lizards_depositer.elft
%Temp%\Scripts\Mage Yal Drags NE.elfc
%Temp%\Scripts\Mage Yal Drags SW.elfc
%Temp%\Scripts\Mammoth_Svar.elfc
%Temp%\Scripts\Mammoth_svar.elft
%Temp%\Scripts\meduski full.elfc
%Temp%\Scripts\meduzy.elfc
%Temp%\Scripts\Meduzyyy.elft
%Temp%\Scripts\Minotaurs Yalahar (FULL) + Depositer + MPrebuyer.elfc
%Temp%\Scripts\Minotaurs.elft
%Temp%\Scripts\Minotaury Yalahar DEPO.elfc
%Temp%\Scripts\Mintwallin.elfc
%Temp%\Scripts\Mintwallin.elft
%Temp%\Scripts\Mistrock cyc (Upper South Spawn, 1st floor with one up).elfc
%Temp%\Scripts\Mistrock Cyc Knight.elft
%Temp%\Scripts\Mistrock Cyc Mage.elft
%Temp%\Scripts\Mistrock Cyc [Easy].wpt
%Temp%\Scripts\Mistrock Cyc [Hardcore].wpt
%Temp%\Scripts\Mistrock cyc [Medium].elfc
%Temp%\Scripts\Mistrock cyc [North Up].elfc
%Temp%\Scripts\Mutant Rats 2 towers mag.elfc
%Temp%\Scripts\Mutant Rats 2 towers.elfc
%Temp%\Scripts\Mutant Rats 3 tower bez batow.elfc
%Temp%\Scripts\Mutant Rats 3 wierze.elfc
%Temp%\Scripts\Mutant Rats 4 wierze.elfc
%Temp%\Scripts\Mutant Rats Mag.elft
%Temp%\Scripts\MutatedHumanAntboyRSDEPOT.elfc
%Temp%\Scripts\Mutatedrat.elft
%Temp%\Scripts\Mutatedratscript.elfc
%Temp%\Scripts\necro ramoa.elfc
%Temp%\Scripts\necro.elft
%Temp%\Scripts\nights pally.elft
%Temp%\Scripts\nighty looting.elfc
%Temp%\Scripts\Nightyyyyy.elft
%Temp%\Scripts\Orc Fort.elfc
%Temp%\Scripts\paladin – mutated rat.elft
%Temp%\Scripts\Paladin – Mutated Rats.elfc
%Temp%\Scripts\Pirates by Stahu.elfc
%Temp%\Scripts\Pirates M.elft
%Temp%\Scripts\Pirates.elft
%Temp%\Scripts\Port Hope – Swamp Troll Cave – by Mastha.elfc
%Temp%\Scripts\Port Hope – Swamp Troll Cave – by Mastha.elft
%Temp%\Scripts\Port Hope North Jungle for Paladin.elfc
%Temp%\Scripts\Port Hope Tortoise.elfc
%Temp%\Scripts\PortHope trolls.elfc
%Temp%\Scripts\PortHope.elfc
%Temp%\Scripts\PortHope.elft
%Temp%\Scripts\PortHopeMage.elft
%Temp%\Scripts\Rook v1.9.elfc
%Temp%\Scripts\Rook.elft
%Temp%\Scripts\scarabs palm.elfc
%Temp%\Scripts\scarabs.elft
%Temp%\Scripts\skille.elfc
%Temp%\Scripts\skille.elft
%Temp%\Scripts\Slime Train.elft
%Temp%\Scripts\Small Cults.elfc
%Temp%\Scripts\small cults.elft
%Temp%\Scripts\Soldier Hell.elfc
%Temp%\Scripts\Soldier Hell.elft
%Temp%\Scripts\Tarantule rkl.elft
%Temp%\Scripts\Tarantule.elfc
%Temp%\Scripts\Tarpit.elfc
%Temp%\Scripts\tarpit.elft
%Temp%\Scripts\trole ab.elft
%Temp%\Scripts\trole abbb.elfc
%Temp%\Scripts\Venore Dragon Lair Knight.elfc
%Temp%\Scripts\Venore Dragon Lair.elfc
%Temp%\Scripts\Waypoints Rookgard Premmy side new 8.5.wpt
%Temp%\Scripts\Worker Golems Hatchling Cave.elfc
%Temp%\Scripts\Worker golems.elfc
%Temp%\Scripts\workergolem(3 spawns).elfc
%Temp%\Scripts\wyrmLB2floorDeposit.elfc
%Temp%\Scripts\Yal Dragon Mage.elft
%Temp%\Scripts\Yal Knight – Cementery.elft
%Temp%\Scripts\Yalahar Cults Surface.elfc
%Temp%\Scripts\Yalahar DLs.elfc
%Temp%\Scripts\Yalahar Drags NE-SE.elfc
%Temp%\Scripts\Yalahar Drags NE.elfc
%Temp%\Scripts\Yalahar Drags SE-NW.elfc
%Temp%\Scripts\Yalahar Drags SE-SW drop.elfc
%Temp%\Scripts\Yalahar Drags SW drop.elfc
%Temp%\Scripts\Yalahar Drags SW Mage.elfc
%Temp%\Scripts\Yalahar Drags SW-NE ltdrop.elfc
%Temp%\Scripts\Yalahar Drags SW-NE.elfc
%Temp%\Scripts\Yalahar Drags SW.elfc
%Temp%\Scripts\Yalahar Green Djinn 3efreet.elfc
%Temp%\Scripts\Yalahar Green Djinn ALL.elfc
%Temp%\Scripts\Yalahar Green Djinn no efreet.elfc
%Temp%\Scripts\Yalahar Green Djinn.elfc
%Temp%\Scripts\Yalahar GS dp.elfc
%Temp%\Scripts\Yalahar GS EK 200.elfc
%Temp%\Scripts\Yalahar GS.elfc
%Temp%\Scripts\Yalahar IceWitch.elfc
%Temp%\Scripts\Yalahar IceWitch.elft
%Temp%\Scripts\Yalahar Minos.elfc
%Temp%\Scripts\Yalahar Minos.elft
%Temp%\Scripts\Yalahar Minotaurs.elfc
%Temp%\Scripts\Yalahar SW quarter.elfc
%Temp%\Scripts\Yalahar SW quarter.elft
%Temp%\Scripts\Yalahar WorkerGolems ltrdp.elfc
%Temp%\Scripts\Yalahar WorkerGolems.elfc
%Temp%\Scripts\Yalahar WorkerGolems.elft
%Temp%\Scripts\Yalahar Zombie 0.elfc
%Temp%\Scripts\Yalahar Zombie 1.elfc
%Temp%\Scripts\[PRO]YALAHAR HERO NECRO.elfc
%Temp%\Scripts\[PRO]YALAHAR WITCHE HERO NECRO.elfc

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\hook.exe: %WinDir%\hook.exe

Detected by UnHackMe:

HOOK.EXE
Default location: %WinDir%\HOOK.EXE

Dropper information:
MD5: 01b9a138a039c1881b02d05a3407a123
File size: 540239 bytes