Solved! Use SPHALF.EXE (Trojan SuspiciousFile) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SPHALF.EXE – Trojan SuspiciousFile removal

File MD5 Virus Alias
SPHALF.EXE d6ec76f257f6a4145c3c8bce4d51da20 Trojan SuspiciousFile

SPHALF.EXE size: 360448 bytes
SPHALF.EXE hash: D6EC76F257F6A4145C3C8BCE4D51DA20

Created files:

%SysDir%\wbem\bak.ocx
%SysDir%\wbem\counter.bak
%SysDir%\wbem\curl.exe
%SysDir%\wbem\goer.dll
%SysDir%\wbem\goer.eta
%SysDir%\wbem\libeay32.dll
%SysDir%\wbem\msvcr71.dll
%SysDir%\wbem\QtCore4.dll
%SysDir%\wbem\QtGui4.dll
%SysDir%\wbem\sleep.exe
%SysDir%\wbem\slscv.exe
%SysDir%\wbem\sphalf.exe
%SysDir%\wbem\ssleay32.dll
%SysDir%\wbem\wdgmgr.exe

Detected by UnHackMe:

SPHALF.EXE
Default location: %SYSDIR%\WBEM\SPHALF.EXE

Dropper information:
MD5: a331cd947a53258c1367e26e95dd5df1
File size: 3796263 bytes

Leave a Reply