Solved! Use MSCSTAT.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSCSTAT.EXE – Trojan Agent removal

File MD5 Virus Alias
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan Agent
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan, Suspicious File
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan Click
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan Eldorado
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan Downloader
MSCSTAT.EXE 0601f7e26c8abf7af721fa7b34e42f6b Trojan Small

MSCSTAT.EXE size: 4608 bytes
MSCSTAT.EXE hash: 0601F7E26C8ABF7AF721FA7B34E42F6B

Created files:

%SysDir%\drivers\cd_load.exe
%SysDir%\inetsrv\MSCStat.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\CashToolbar: %WinDir%\System32\inetsrv\MSCStat.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ClickTheButton: %WinDir%\System32\drivers\cd_load.exe

Detected by UnHackMe:

MSCSTAT.EXE
Default location: %SYSDIR%\INETSRV\MSCSTAT.EXE

Dropper information:
MD5: 0601f7e26c8abf7af721fa7b34e42f6b
File size: 4608 bytes

Leave a Reply