a variant of Win32/Spy.Agent.ONQ

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

a variant of Win32/Spy.Agent.ONQ also known as TROJ_FAM_00000c0.TOMA, Trojan ( 0037efc91 ), Win32:Crypt-GBV [Trj].

Malware Analysis of a variant of Win32/Spy.Agent.ONQ – SYETOM.EXE

Created files:

%Temp%\d41d8cd98f00b204e9800998ecf8427e.zip
%Program Files%\Google\Chrome\Temp\source4032_10716\chrome_patch.diff
%Program Files%\Nril\syetom.exe
%SysDir%\drivers\etc\hosts.ics

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\syetom: “%Program Files%\Nril\syetom.exe”

Detected by UnHackMe:

SYETOM.EXE
Default location: %PROGRAM FILES%\NRIL\SYETOM.EXE

Dropper hash(md5): 848f235a39462120b498648a516426d9

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

4
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera