OLCJEUBW.EXE – Virus CeeInject

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

OLCJEUBW.EXE – Virus CeeInject removal

FileMD5Virus Alias
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Virus CeeInject
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Trojan SuspiciousFile
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Trojan XPACK
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Trojan Generic
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Trojan Downloader
OLCJEUBW.EXE 7a3dc0564dcc8dc091c9afb2203a98f5 Trojan ZBot

OLCJEUBW.EXE size: 118585 bytes
OLCJEUBW.EXE hash: 7A3DC0564DCC8DC091C9AFB2203A98F5

Created files:

%Program Files Common%\qxsQbxgp.exe
%Local AppData%\Microsoft\BovXdYyO.exe
%SysDir%\config\systemprofile\Start Menu\Programs\Startup\sdmmVYnN.exe
%TEMP%\OLCjeUbW.exe
%AppData%\Microsoft\Crypto\RSA\S-1-5-21-515967899-854245398-1708537768-1003\655a7350831c302c746f72e92c1ab924_78de4566-a5cc-4192-bf8d-014e0d2bd235

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: %WinDir%\System32\userinit.exe,,%Program Files Common%\qxsQbxgp.exe
HKLM\System\CurrentControlSet\Services\wscsvc\Start: 04000000
HKLM\System\CurrentControlSet\Services\wuauserv\Start: 04000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\AkjsDDLS: %WinDir%\System32\config\Systemprofile\Local Settings\Application Data\Microsoft\BovXdYyO.exe

Detected by UnHackMe:

OLCJEUBW.EXE
Default location: %TEMP%\OLCJEUBW.EXE

Dropper information:
MD5: 7a3dc0564dcc8dc091c9afb2203a98f5
File size: 118585 bytes

Leave a Reply