Solved! Use KILLOK.EXE (Trojan Delf) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

KILLOK.EXE – Trojan Delf removal

FileMD5Virus Alias
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Delf
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Hlux
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Generic
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Eldorado
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Agent
KILLOK.EXE 0eb9122714055815b0566af20e22bbd1 Trojan Delphi

KILLOK.EXE size: 92582 bytes
KILLOK.EXE hash: 0EB9122714055815B0566AF20E22BBD1

Created files:

%SysDir%\sIRC4.exe
%SysDir%\xdccPrograms\KillOK.exe
%SysDir%\xdccPrograms\Network Setup Wizard.exe
%SysDir%\xdccPrograms\Opera_1161_int_Setup.exe
%SysDir%\xdccPrograms\SafariSetup.exe
%SysDir%\xdccPrograms\SoftwareUpdate.exe
%SysDir%\xdccPrograms\Wireless Network Setup Wizard.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell: Explorer.exe sIRC4.exe

Detected by UnHackMe:

KILLOK.EXE
Default location: %SYSDIR%\XDCCPROGRAMS\KILLOK.EXE

Dropper information:
MD5: 0eb9122714055815b0566af20e22bbd1
File size: 92582 bytes

Leave a Reply