Solved! Use RASMEDIA.DLL (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

RASMEDIA.DLL – Trojan Agent removal

File MD5 Virus Alias
RASMEDIA.DLL 977d916487534ac126a170e33a0d6438 Trojan Agent
RASMEDIA.DLL 977d916487534ac126a170e33a0d6438 Trojan Generic
RASMEDIA.DLL 977d916487534ac126a170e33a0d6438 Trojan Eldorado
RASMEDIA.DLL 977d916487534ac126a170e33a0d6438 Trojan Downloader

RASMEDIA.DLL size: 40960 bytes
RASMEDIA.DLL hash: 977D916487534AC126A170E33A0D6438

Created files:

%SysDir%\rasmedia.dll
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\WinHelp32\Type: 10000000
HKLM\System\CurrentControlSet\Services\WinHelp32\Start: 02000000
HKLM\System\CurrentControlSet\Services\WinHelp32\DisplayName: Windows Help System
HKLM\System\CurrentControlSet\Services\WinHelp32\ImagePath: %SystemRoot%\System32\svchost.exe -k krnlsrvc
HKLM\System\CurrentControlSet\Services\WinHelp32\Description: Windows Help System for X32 windows desktop

Detected by UnHackMe:

RASMEDIA.DLL
Default location: %SYSDIR%\RASMEDIA.DLL

Dropper information:
MD5: 8193e61f9d3ff62322d15fb183a12012
File size: 153711 bytes

Leave a Reply