How to remove 2o1ajagt.exe

2o1ajagt.exe , mwfubaob.exe

Files size 111,826 bytes

MD5: 317DD28F342E0941347BDEE1FF384F42

SHA-1: 81282F8E16A7E47E76B56CCFD627262BF7855DEB

==================================================

Files Created

C:\Documents and Settings\[UserName]\Local Settings\Temp\\herss.exe

C:\Documents and Settings\[UserName]\Local Settings\Temp\\cvasds0.dll (0-9)

c:\2o1ajagt.exe

c:\mwfubaob.exe

c:\autorun.inf

Registry Modifications

Key Added

HKLM\SOFTWARE\Classes\CLSID\MADOWN

The newly created Registry Values are:

HKLM\SOFTWARE\Classes\CLSID\MADOWN\urlinfo : dsa2whj.a

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\

cdoosoft : "%Temp%\herss.exe"

Remote Host

218.59.144.135 port 80

218.59.144.140 port 80

URLs to download / data identified

http://aas52.com/1mg/am1.rar

http://www.sinaj29.com/1mg/am.rar

Values modified

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\Hidden: 0x00000002

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\

Advanced\ShowSuperHidden: 0x00000000

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDriveTypeAutoRun: 0x00000091

=================================================

วิธีกำจัด/แก้ virus : 3n8awsyg.exe ,9b9w3.exe

=================================================

Download : PeeTechFix-Win32/PSW.OnlineGame 2.0.5

----------------------------------------------------------------------