I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free DownloadFully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
VATY.EXE – Trojan Delf removal
File | MD5 | Virus Alias |
---|---|---|
VATY.EXE | 9B0FBD74F5CFC7B09E57BE1A79275652 | Trojan Delf |
VATY.EXE | 9B0FBD74F5CFC7B09E57BE1A79275652 | Trojan Generic |
VATY.EXE | 9B0FBD74F5CFC7B09E57BE1A79275652 | Trojan Eldorado |
VATY.EXE | 9B0FBD74F5CFC7B09E57BE1A79275652 | Trojan Siggen |
VATY.EXE size: 667807 bytes
VATY.EXE hash: 9B0FBD74F5CFC7B09E57BE1A79275652
Created files:
%Program Files%\Bkxur\Odge\Hcax.dll
%Program Files%\Bkxur\Ootf.exe
%Program Files%\Bkxur\Vaty.exe
%TEMP%\g812\StreamingStar.URL.Helper.v3.03.WinAll.Incl.Keygen-CRD.exe
Autostart registry keys:
HKLM\System\CurrentControlSet\Services\OALX\Start: 02000000
HKLM\System\CurrentControlSet\Services\OALX\Type: 10000000
HKLM\System\CurrentControlSet\Services\OALX\Description: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\DisplayName: Data Online Transaction Processing Module
HKLM\System\CurrentControlSet\Services\OALX\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\OALX\Group: TDI
HKLM\System\CurrentControlSet\Services\OALX\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\OALX\ImagePath: %Program Files%\Bkxur\Ootf.exe
Detected by UnHackMe:
VATY.EXE
Default location: %PROGRAM FILES%\BKXUR\VATY.EXE
Dropper information:
MD5: 9FE8A85771AC1EF3BF0CE4BACB9CBA2B
File size: 3032210 bytes