Solved! Use MSPOA32.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSPOA32.EXE – Trojan Agent removal

File MD5 Virus Alias
MSPOA32.EXE b4f163b89e4ea1125cc54945136305e8 Trojan Agent
MSPOA32.EXE b4f163b89e4ea1125cc54945136305e8 Trojan Generic
MSPOA32.EXE b4f163b89e4ea1125cc54945136305e8 Trojan Small

MSPOA32.EXE size: 669022 bytes
MSPOA32.EXE hash: B4F163B89E4EA1125CC54945136305E8

Created files:

%WinDir%\svchost.exe
%SysDir%\concp32.exe
%SysDir%\explorer.exe
%SysDir%\mspoa32.exe
%SysDir%\vcl32.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{E4883584-8B9A-11D5-EBA1-F78EEEEEE983}\StubPath: mspoa32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\VCL: vcl32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\VCL: vcl32.exe

Detected by UnHackMe:

MSPOA32.EXE
Default location: %SYSDIR%\MSPOA32.EXE

Dropper information:
MD5: ac0877c540bf95faf339e1483a31d898
File size: 662151 bytes

Leave a Reply