BOANFILE.EXE – Unclassified Malware removal

BOANFILE.EXE size: 3604480 bytes
BOANFILE.EXE hash: 0D534DF32C48553491D28AC735B08AC5

Created files:

%Program Files%\boanfile\boanfile.dll
%Program Files%\boanfile\boanfile.exe
%Program Files%\boanfile\boanfilemon.exe
%Program Files%\boanfile\boanfilesvc.exe
%Program Files%\boanfile\uninst.exe
%AppData%\boanfile\boanfilecnt.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\boanfile\Type: 10000000
HKLM\System\CurrentControlSet\Services\boanfile\Start: 02000000
HKLM\System\CurrentControlSet\Services\boanfile\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\boanfile\DisplayName: boanfile svc
HKLM\System\CurrentControlSet\Services\boanfile\ImagePath: %Program Files%\boanfile\boanfilesvc.exe

Detected by UnHackMe:

BOANFILE.EXE
Default location: %PROGRAM FILES%\BOANFILE\BOANFILE.EXE

Dropper information:
MD5: bff1ebb80f4885050e247022bcbae237
File size: 396649 bytes