Trojan Agent – manedotu.dll – 0a0c247ea655ca919f2650c2563cc590

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Agent
Also known as: Worm Autorun, Trojan Menti
SHA256: fdda5e722f310b63c0d4e2134f36b02bdfc7d80d89136a63ee0ff38d4d2c4d98
SHA1: 88396b21f559b9b39ffc1ebc06e0b00fe898e8e5
MD5: 0a0c247ea655ca919f2650c2563cc590
File size: 737228 bytes

Created files:

%WinDir%\manedotu.dll – Trojan Agent
%UserProfile%\B85EgtCQKi4p6Z9Kt2.exe – Trojan Agent
%UserProfile%\beici.exe – Trojan Agent
%UserProfile%\cof.exe – Trojan Agent
%UserProfile%\cog.exe – Trojan Agent

Trojan Agent created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Nbuferez: rundll32.exe “%WinDir%\manedotu.dll”,Startup
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\beici: %UserProfile%\beici.exe /W

Leave a Reply