VATY.EXE – Trojan Delf

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

VATY.EXE – Trojan Delf removal

FileMD5Virus Alias
VATY.EXE 9B0FBD74F5CFC7B09E57BE1A79275652 Trojan Delf
VATY.EXE 9B0FBD74F5CFC7B09E57BE1A79275652 Trojan Generic
VATY.EXE 9B0FBD74F5CFC7B09E57BE1A79275652 Trojan Eldorado
VATY.EXE 9B0FBD74F5CFC7B09E57BE1A79275652 Trojan Siggen

VATY.EXE size: 667807 bytes
VATY.EXE hash: 9B0FBD74F5CFC7B09E57BE1A79275652

Created files:

%Program Files%\Bkxur\Odge\Hcax.dll
%Program Files%\Bkxur\Ootf.exe
%Program Files%\Bkxur\Vaty.exe
%TEMP%\g812\StreamingStar.URL.Helper.v3.03.WinAll.Incl.Keygen-CRD.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\OALX\Start: 02000000
HKLM\System\CurrentControlSet\Services\OALX\Type: 10000000
HKLM\System\CurrentControlSet\Services\OALX\Description: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\DisplayName: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\OALX\Group: TDI
HKLM\System\CurrentControlSet\Services\OALX\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\OALX\ImagePath: %Program Files%\Bkxur\Ootf.exe

Detected by UnHackMe:

VATY.EXE
Default location: %PROGRAM FILES%\BKXUR\VATY.EXE

Dropper information:
MD5: 9FE8A85771AC1EF3BF0CE4BACB9CBA2B
File size: 3032210 bytes

Leave a Reply