Solved! Use HRA33.DLL (Trojan Buzus) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

HRA33.DLL – Trojan Buzus removal

FileMD5Virus Alias
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Buzus
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Generic
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Backdoor RBot
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Agent
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Backdoor IRCBot
HRA33.DLL 9ac7d4c8105fa3ab02023d07b790dfb9 Trojan Scar

HRA33.DLL size: 8704 bytes
HRA33.DLL hash: 9AC7D4C8105FA3AB02023D07B790DFB9

Created files:

%WinDir%\ckgckw.exe
%SysDir%\hra33.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Type: 10010000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Start: 02000000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\DisplayName: Stuvwx Abcdefgh Jklmnopq Stuv
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\ImagePath: %WinDir%\ckgckw.exe
HKLM\System\CurrentControlSet\Services\Stuvwx Abcdefgh Jkl\Description: Stuvwxya Cdefghijk Mnopqrs Uvwxyabc Efg

Detected by UnHackMe:

HRA33.DLL
Default location: %SYSDIR%\HRA33.DLL

Dropper information:
MD5: dd2ae092f990851bd8cdda6c63a524f9
File size: 19968 bytes

Leave a Reply