OTLIANMENG5.EXE – Trojan Artemis

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

OTLIANMENG5.EXE – Trojan Artemis removal

FileMD5Virus Alias
OTLIANMENG5.EXE ed95f23ded5fe03997fa7df831de1b08 Trojan Artemis
OTLIANMENG5.EXE ed95f23ded5fe03997fa7df831de1b08 Trojan SuspiciousFile
OTLIANMENG5.EXE ed95f23ded5fe03997fa7df831de1b08 Trojan Downloader
OTLIANMENG5.EXE ed95f23ded5fe03997fa7df831de1b08 Trojan Agent
OTLIANMENG5.EXE ed95f23ded5fe03997fa7df831de1b08 Trojan Meredrop

OTLIANMENG5.EXE size: 448620 bytes
OTLIANMENG5.EXE hash: ED95F23DED5FE03997FA7DF831DE1B08

Created files:

%Program Files%\yidao\Fixed_Directory_Name\gamelsp.dll
%Program Files%\yidao\Fixed_Directory_Name\SkinH.dll
%Program Files%\yidao\Fixed_Directory_Name\skinh.she
%Program Files%\yidao\Fixed_Directory_Name\zipclass.dll
%Program Files%\yidao\Fixed_Directory_Name\UnicodeFile.bin
%Program Files%\yidao\OTlianmeng5.exe
%Program Files%\yidao\setup_qd101.exe
%Program Files%\yidao\WinExc.dll
%Program Files%\yidao\yidao76.exe
%Program Files%\yidao\zip.dll
%Program Files%\yidao\Fixed_Directory_Name_Collision_1\zipclass.dll
%Program Files%\yidao\Fixed_Directory_Name_Collision_1\UnicodeFile.bin
%Program Files%\yidao\Fixed_Directory_Name_Collision_1\UnicodeFile_1.bin
%Program Files%\yidao\UnicodeFile.bin

Detected by UnHackMe:

OTLIANMENG5.EXE
Default location: %PROGRAM FILES%\YIDAO\OTLIANMENG5.EXE

Dropper information:
MD5: 2e9e271b68bb2761d0b9d3d5d7911d13
File size: 14150017 bytes

Leave a Reply