Solved! Use HRA33.DLL (Trojan Buzus) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

HRA33.DLL – Trojan Buzus removal

FileMD5Virus Alias
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Buzus
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Generic
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Backdoor RBot
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Agent
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Backdoor IRCBot
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Scar

HRA33.DLL size: 8704 bytes
HRA33.DLL hash: 9AC7D4C8105FA3AB02023D07B790DFB9

Created files:

%WinDir%\kousoe.exe
%SysDir%\hra33.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\Type: 10010000
HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\Start: 02000000
HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\DisplayName: Bcdefg Ijklmnop Rstuvwxy Bcde
HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\ImagePath: %WinDir%\kousoe.exe
HKLM\System\CurrentControlSet\Services\Bcdefg Ijklmnop Rst\Description: Bcdefghi Klmnopqrs Uvwxyab Defghijk Mno

Detected by UnHackMe:

HRA33.DLL
Default location: %SYSDIR%\HRA33.DLL

Dropper information:
MD5: b0e6b093fc9f0b4c500a7ff1441682a9
File size: 19968 bytes

Leave a Reply