KSUSER.DLL – Trojan OnLineGames

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

KSUSER.DLL – Trojan OnLineGames removal

FileMD5Virus Alias
KSUSER.DLL 0ec6a4aa1ca122b7c387b14410e677d4 Trojan OnLineGames
KSUSER.DLL 0ec6a4aa1ca122b7c387b14410e677d4 Trojan Generic
KSUSER.DLL 0ec6a4aa1ca122b7c387b14410e677d4 Trojan Eldorado
KSUSER.DLL 0ec6a4aa1ca122b7c387b14410e677d4 Trojan Downloader
KSUSER.DLL 0ec6a4aa1ca122b7c387b14410e677d4 Trojan Agent

KSUSER.DLL size: 38912 bytes
KSUSER.DLL hash: 0EC6A4AA1CA122B7C387B14410E677D4

Created files:

%SysDir%\asianlan8.dll
%SysDir%\dllcache\ksuser.dll
%SysDir%\yuksuser.dll
%SysDir%\yumidimap.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Control\Keyboard Layouts\E0200804\Ime File: CHINASOUGOU.IME
HKLM\System\CurrentControlSet\Control\Keyboard Layouts\E0200804\Layout Text: ???(???)
HKLM\System\CurrentControlSet\Control\Keyboard Layouts\E0200804\Layout File: kbdus.dll
HKLM\System\CurrentControlSet\Services\cryptsvc\Start: 04000000

Detected by UnHackMe:

KSUSER.DLL
Default location: %SYSDIR%\DLLCACHE\KSUSER.DLL

Dropper information:
MD5: 19c5523d7675b9de9927459ada5107de
File size: 13312 bytes

Leave a Reply