Solved! Use MSHELP.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSHELP.EXE – Trojan Artemis removal

File MD5 Virus Alias
MSHELP.EXE eaafec0d3050536bb518780471a99c1b Trojan Artemis
MSHELP.EXE eaafec0d3050536bb518780471a99c1b Trojan Agent

MSHELP.EXE size: 45056 bytes
MSHELP.EXE hash: EAAFEC0D3050536BB518780471A99C1B

Created files:

C:\Caches\csrss (64 bit).exe
C:\Caches\MShelp.exe
%Temp%\RarSFX0\csrss (64 bit).exe
%Temp%\RarSFX0\MShelp.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SystemEngine: C:\Caches\MShelp.exe

Detected by UnHackMe:

MSHELP.EXE
Default location: C:\CACHES\MSHELP.EXE

Dropper information:
MD5: 8827a41a69ce5169e75d45292db6d5b9
File size: 475726 bytes

Leave a Reply