HAO123.EXE – Unclassified Malware removal

HAO123.EXE size: 622592 bytes
HAO123.EXE hash: 86E10EE39311D2842B6DEED6A46BE2DB

Created files:

%Program Files%\tbkset\fanli.exe
%Program Files%\tbkset\hao123.exe
%Program Files%\tbkset\tbkSet.exe
%Program Files%\tbkset\tbkSetHome.exe
%Program Files%\tbkset\uninst.exe
%TEMP%\4CD325.dmp
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\tbk_hao123: %Program Files%\tbkset\tbkSet.exe 8

Detected by UnHackMe:

HAO123.EXE
Default location: %PROGRAM FILES%\TBKSET\HAO123.EXE

Dropper information:
MD5: b3d2ecd3cf42675495e08106ef862788
File size: 1250792 bytes