Solved! Use SVCHOST.EXE (Trojan Banker) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVCHOST.EXE – Trojan Banker removal

File MD5 Virus Alias
SVCHOST.EXE 5447b528c7bf206fe13115bcf8a60bd8 Trojan Banker
SVCHOST.EXE 5447b528c7bf206fe13115bcf8a60bd8 Trojan Bancos
SVCHOST.EXE 5447b528c7bf206fe13115bcf8a60bd8 Trojan Delf

SVCHOST.EXE size: 1704960 bytes
SVCHOST.EXE hash: 5447B528C7BF206FE13115BCF8A60BD8

Created files:

%WinDir%\config\svchost.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\svchost: %WinDir%\config\svchost.exe

Detected by UnHackMe:

SVCHOST.EXE
Default location: %WinDir%\CONFIG\SVCHOST.EXE

Dropper information:
MD5: 5447b528c7bf206fe13115bcf8a60bd8
File size: 1704960 bytes

Leave a Reply