Solved! Use INSTAL.EXE.EXE (Trojan Magania) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

INSTAL.EXE.EXE – Trojan Magania removal

File MD5 Virus Alias
INSTAL.EXE.EXE 655de4c698f814ea27fd298d91039690 Trojan Magania
INSTAL.EXE.EXE 655de4c698f814ea27fd298d91039690 Trojan Eldorado
INSTAL.EXE.EXE 655de4c698f814ea27fd298d91039690 Trojan Downloader
INSTAL.EXE.EXE 655de4c698f814ea27fd298d91039690 Virus Sality

INSTAL.EXE.EXE size: 57344 bytes
INSTAL.EXE.EXE hash: 655DE4C698F814EA27FD298D91039690

Created files:

%Program Files%\AppPatch\NetSyst69.dll
%WinDir%\instal.EXE.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\SuperProServer\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\SuperProServer\Type: 10010000
HKLM\System\CurrentControlSet\Services\SuperProServer\Start: 02000000
HKLM\System\CurrentControlSet\Services\SuperProServer\DisplayName: SuperProServer
HKLM\System\CurrentControlSet\Services\SuperProServer\ImagePath: %WinDir%\instal.EXE.exe

Detected by UnHackMe:

INSTAL.EXE.EXE
Default location: %WinDir%\INSTAL.EXE.EXE

Dropper information:
MD5: 655de4c698f814ea27fd298d91039690
File size: 57344 bytes

Leave a Reply