BOANFILEMON.EXE – Unclassified Malware removal

BOANFILEMON.EXE size: 339968 bytes
BOANFILEMON.EXE hash: 7E452900E487B21986F24790C0AA7B75

Created files:

%Program Files%\boanfile\boanfile.dll
%Program Files%\boanfile\boanfile.exe
%Program Files%\boanfile\boanfilemon.exe
%Program Files%\boanfile\boanfilesvc.exe
%Program Files%\boanfile\uninst.exe
%AppData%\boanfile\boanfilecnt.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\boanfile\Type: 10000000
HKLM\System\CurrentControlSet\Services\boanfile\Start: 02000000
HKLM\System\CurrentControlSet\Services\boanfile\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\boanfile\DisplayName: boanfile svc
HKLM\System\CurrentControlSet\Services\boanfile\ImagePath: %Program Files%\boanfile\boanfilesvc.exe

Detected by UnHackMe:

BOANFILEMON.EXE
Default location: %PROGRAM FILES%\BOANFILE\BOANFILEMON.EXE

Dropper information:
MD5: bff1ebb80f4885050e247022bcbae237
File size: 396649 bytes