Dmitry Sokolov recommends UnHackMe!
UnHackMe is a powerful tool against malware.
UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!
(5 / 5)
Win.Trojan.Agent-281222 also known as Trojan.AntiAV, Trojan/AntiAV.bnn, W32/Heuristic-210!Eldorado.
Malware Analysis of Win.Trojan.Agent-281222 – SRKUO.DLL
Created files:
%Program Files%\VMware\VMware Tools\help\wwhelp\wwhimpl\readme.eml
%Program Files%\VMware\VMware Tools\help\readme.eml
%WinDir%\Fonts\srkuo.dll
%WinDir%\Fonts\tbmto.dll
%SysDir%\runouce.exe
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run\SysAnti: “%Program Files Common%\SysAnti.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Runonce: 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 72 75 6E 6F 75 63 65 2E 65 78 65 00 5E 3F 10 7C 78 79 12 00 00 00 00 00 30 AE 88 7C 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 AC 79 12 00 5C 4F 3F 7C 89 78 3F 7C 0C 3F 12 00 3C 79 12 00 40 04 91 7C 69 3F 3F 7C 12 75 44 7E 75 49 46 7E 4F 75 44 7E 4F 06 00 00 30 75 00 00 00 00 00 00 30 AE 88 7C 03 01 00 00 00 40 79 7F 01 00 00 00 08 00 00 00 4F 06 00 00 3F 06 00 00 3F 3F 12 00 55 49 3F 7C 6C 24 86 7C 21 00 00 00 78 79 12 00 3F 3F 12 00 30 AE 88 7C 44 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A4 07 00 00 A0 07 00 00 4F 06 00 00 4F 61 42 00
Detected by UnHackMe:
SRKUO.DLL
Default location: %WinDir%\FONTS\SRKUO.DLL
Dropper hash(md5): d6164b97ef89d4a7158d38f3911fe750
UnHackMe
removes malware invisible for your antivirus!
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.