Hangame Trojan - PrivacyAnywhere Spyware Research Library


	Home / Research


	Hangame

Details of the Hangame are shown below. This threat can be detected and cleaned using PestBlock Anti-Spyware.


Name:	Hangame
Type:	Trojan
Risk:
Description:	Trojan.PSW.Hangame is a trojan which records keystrokes when the user access to www.hangame.com and steals login information.

Removal
We do not publish here the MD5 checksums for files. PestBlock Anti Spyware can identify good file from bad more accurately.

Running Processes:

explorer.exe
hanscsk.exe
helps.exe
rundll32.exe
spoo1sv.exe
associates.exe
redmyth.exe
sysunit.exe
01cd41a4.exe
088f4edd.exe
3b908dc4.exe
44f0700f.exe
45efb823.exe
5c582222.exe
726940db.exe
803784f3.exe
8a42bb82.exe
b1309dd4.exe
c1c98e9e.exe
c4224c40.exe
d2974b1f.exe
e0ea2807.exe
f97c0b43.exe
f9d0744b.exe
ff2da649.exe
ffa745e3.exe
zt.exe
7f6793d0c.exe$
a4afa019c.exe$
1beba9bbc.exe$
0fd57660c.exe$
06b387b1c.exe$
3d76ad69c.exe$
eaaec6e5c.exe$
7d31ddbec.exe$
925dd7d2c.exe$
2e811ae6c.exe$
399daf60c.exe$
6fb50ab3c.exe$
f39320a0c.exe$
331f39d2c.exe$
8f92ed72c.exe$
d1ca80a5c.exe$
a8ef38b1c.exe$
026c8b99c.exe$
77e8c40dc.exe$
fb9f604ac.exe$
ded80b58c.exe$
b04f767cc.exe$
6c220a9cc.exe$
0be18c5cc.exe$
824ad321c.exe$
2abdbc2cc.exe$
a840b44fc.exe$
a6c89cb9c.exe$
bffd22c2c.exe$
08de5f37c.exe$
72ed3b76c.exe$
8efcd0efc.exe$
0a8a36f5c.exe$
d03672ebc.exe$
12496277c.exe$
e0de0608c.exe$
6fc8119dc.exe$
aa86aef6c.exe$
0dacfc8b.exe
9d33f17a.exe
c6a22dac.exe
dfabf7fb.exe
f9363ea9.exe
spoo1sv.exe
7a87b0e8.exe
33872c6c.exe
6c4553e7.exe
4fc1ca2e.exe
6d8e7c8b.exe
c0cc0ca4.exe
d42cb03e.exe
a87a0372.exe

Files:

systemroot+\system32\hanscsk.exe
systemroot+\system32\hhdll.dll
systemroot+\system32\hg1dll.dll
systemroot+\system32\hgdll.dll
systemroot+\system32\spoo1sv.exe
systemroot+\system32\sysmon.dll
systemroot+\system32\sysunit.exe
systemroot+\system32\krxdll.dll
explorer.exe
check.dll
hanscsk.exe
helps.exe
hgdll.dll
hhdll.dll
hzdll.dll
rundll32.exe
spoo1sv.exe
winsapi.dll
associates.exe
hangame01.dll
netguard.dll
recycl.com
recycl.dll
redmyth.exe
sysmon.dll
sysunit.exe
01cd41a4.exe
088f4edd.exe
3b908dc4.exe
44f0700f.exe
45efb823.exe
5c582222.exe
726940db.exe
803784f3.exe
8a42bb82.exe
b1309dd4.exe
c1c98e9e.exe
c4224c40.exe
d2974b1f.exe
e0ea2807.exe
f97c0b43.exe
f9d0744b.exe
ff2da649.exe
ffa745e3.exe
zt.exe
10fc97bac.bin$
0bd12269c.bin$
52a26ff2c.bin$
f514e684c.bin$
3f082240c.bin$
7f3e2b16c.bin$
7f6793d0c.exe$
a4afa019c.exe$
fffd2cc6c.$$
1beba9bbc.exe$
53a18928c.bin$
2c621209c.$
67316de9c.$
9d3867dbc.$
14b61625c.bin$
0016960fc.$
0fd57660c.exe$
036caebdc.$
7289fa74c.$
d2c99c91c.$
f8ec0e10c.$
bedfe186c.$
06b387b1c.exe$
3d76ad69c.exe$
1f1ba31bc.$
7decea7dc.$
12b16a98c.$
22bf2a21c.bin$
c92baf8ac.$
7047f387c.bin$
c8c44b07c.$
3cd28b1fc.$
eaaec6e5c.exe$
f62d592cc.$
f62d592cc.$
7d31ddbec.exe$
be50749dc.$
2e042fb2c.$
f84242d7c.$
1cccf853c.$$$$
d4dd4763c.$
e45aa1a8c.$
7f9a7991c.$
36070786c.$
4ffe0ac8c.bin$
6dcacb48c.bin$
7b4f6d91c.$
f498c14ac.$
fb7728d2c.$
58e3add8c.bin$
1016a098c.bin$
925dd7d2c.exe$
7317af66c.bin$
cf0d007fc.$
262c554fc.$
05f50d18c.bin$
2209af9dc.$$
2e811ae6c.exe$
35265121c.$
399daf60c.exe$
3c9caea8c.$
432ec5b3c.$
791cb26ec.bin$
d87249f9c.$
ea6a35c2c.$
f6c84bddc.$
6fb50ab3c.exe$
12496277c.$
a3908242c.bin$
a47482d1c.$
f39320a0c.exe$
b9decd1dc.bin$
331f39d2c.exe$
117519c2c.pws$
42518f7fc.pws$
f92fcee6c.bin$
8f92ed72c.exe$
0e9e9eafc.bin$
d1ca80a5c.exe$
7bc01a1ac.$
c1620512c.$
d970ae0484c128894026cbbcd6e16ef9
36aa2ad7d4976e12c5ef56d9d7ff63d0
3d111ed88b67d705c594a8bcb600cf9c
3ea597434d3f78348e688054193365d1
a573907486c10162b4b453f33c836e2c
b992d3f1a07beb3480af9da8ac770233
cd9f66f9c.$$$
bccb8af4c.$
cc43ce61c.bin$
12496277c.pe_$
e4f778f8c.$
00c38b49c.bin$
054a5099c.bin$
e8b64a5ac.bin$
a8ef38b1c.exe$
beea6f78c.bin$
3c82b0dcc.bin$
026c8b99c.exe$
f1cf1991c.bin$
b04f767cc.$
77e8c40dc.exe$
2a7def2dc.bin$
fb9f604ac.exe$
c359f842c.bin$
aa7eefdbc.bin$
c3f9e797c.$
f602e9f7c.bin$
ded80b58c.exe$
2abdbc2cc.$
b04f767cc.exe$
dfd8e450c.$
ab7b234cc.$
b5a68e05c.131$
2abdbc2cc.$
a87ce202c.pe_$
629cba3bc.pe_$
d9171202c.co_$
e2ab88f9c.co_$
6c220a9cc.exe$
ac659bdcc.bin$
a4d922e8c.bin$
12496277c.$
f754bcb0c.$
0010ee67c.$
0be18c5cc.exe$
f259c89bc.$
824ad321c.exe$
2abdbc2cc.exe$
e7d7b6c9c.bin$
a5da9ea8c.$
3f83e9dfc.$
0ffe7bedc.bin$
c8e20266c.bin$
d78c9dd6c.scr$
e777fdd4c.pe_$
ec7cb7d9c.pe_$
044ddefac.bin$
a840b44fc.exe$
2de670aec.$
223d70f0c.$
292c6a33c.$
42edc752c.bin$
1d662839c.bin$
12496277c.bin$
427a9049c.$
2ba746a0c.$
a665e600c.bin$
fea18964c.exw$
9eb7e7a8c.exw$
78e11f40c.exw$
626cfbd1c.exw$
a6c89cb9c.exe$
3877d9f1c.$
0ca58670c.$
84bfa0f6c.$
7afe000bc.bin$
59901e6bc.bin$
0a36d961c.$
12496277c.$
d46113a1c.$
12496277c.bin$
14ea21f9c.bin$
bffd22c2c.exe$
12496277c.bin$
08de5f37c.exe$
62fc3ce1c.$
85ef10f1c.bin$
9c448919c.$
72ed3b76c.exe$
12496277c.bin$
8efcd0efc.exe$
0a8a36f5c.exe$
aa8354a2c.bin$
d03672ebc.exe$
12496277c.exe$
e0de0608c.exe$
aa86aef6c.bin$
6fc8119dc.exe$
1428becbc.exw$
833a085fc.bin$
aa86aef6c.exe$
bede3d8bc.bin$
061ccf8cc.bin$
0dacfc8b.exe
9d33f17a.exe
c6a22dac.exe
dfabf7fb.exe
f9363ea9.exe
spoo1sv.exe
7a87b0e8.exe
2db5cd10.dll
33872c6c.exe
6c4553e7.exe
4fc1ca2e.exe
6d8e7c8b.exe
708b35cf.dll
7988d422.dll
c0cc0ca4.exe
d42cb03e.exe
f35d14aa.dll
a87a0372.exe

News for Jul 4, 2008

New Version!
PestBlock version 4.1. Many new featured, bugfixes. Download new version today! Learn More...

	Download Demo Version
	Buy Now!

Buy Online

	Online Store



	Discount Pricing

Spyware Research

Browse our Spyware Research Center.

	Spyware Research

Free Newsletter

Sign up for our free product newsletter today and get informed about new updates and releases by email. You will also receive the latest discounts and offers for our products!

	Click Here to Sign Up