NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE – Trojan Agent removal

FileMD5Virus Alias
NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE 98a1c149902f4cdb67681d0d5716cdf3 Trojan Agent
NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE 98a1c149902f4cdb67681d0d5716cdf3 Trojan Chifrax

NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE size: 742076 bytes
NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE hash: 98A1C149902F4CDB67681D0D5716CDF3

Created files:

%Program Files%\Eaci\Afvx\Huuhw.dll
%Program Files%\Eaci\Vaer.exe
%Program Files%\Eaci\Wyav.exe
%TEMP%\g820\NetScream.v1.5.25.2009.WinAll.Incl.Cracked.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\OALX\Start: 02000000
HKLM\System\CurrentControlSet\Services\OALX\Type: 10000000
HKLM\System\CurrentControlSet\Services\OALX\Description: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\DisplayName: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\OALX\Group: TDI
HKLM\System\CurrentControlSet\Services\OALX\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\OALX\ImagePath: %Program Files%\Eaci\Vaer.exe

Detected by UnHackMe:

NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE
Default location: %TEMP%\G820\NETSCREAM.V1.5.25.2009.WINALL.INCL.CRACKED.EXE

Dropper information:
MD5: 2169c447e1210032e8f327348c0538c9
File size: 2686885 bytes

Leave a Reply