Solved! Use SVCHOST.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVCHOST.EXE – Trojan Agent removal

File MD5 Virus Alias
SVCHOST.EXE dcf79bc8ed06351bf9c127008f80490f Trojan Agent
SVCHOST.EXE dcf79bc8ed06351bf9c127008f80490f Trojan Generic
SVCHOST.EXE dcf79bc8ed06351bf9c127008f80490f Trojan Webprefix
SVCHOST.EXE dcf79bc8ed06351bf9c127008f80490f Rootkit TDSS
SVCHOST.EXE dcf79bc8ed06351bf9c127008f80490f Trojan FakeAV

SVCHOST.EXE size: 176128 bytes
SVCHOST.EXE hash: DCF79BC8ED06351BF9C127008F80490F

Created files:

%WinDir%\temp\svchost.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\LittleBoy\Type: 10000000
HKLM\System\CurrentControlSet\Services\LittleBoy\Start: 02000000
HKLM\System\CurrentControlSet\Services\LittleBoy\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\LittleBoy\DisplayName: LittleBoy Tools
HKLM\System\CurrentControlSet\Services\LittleBoy\ImagePath: %WinDir%\temp\svchost.exe

Detected by UnHackMe:

SVCHOST.EXE
Default location: %TEMP%\SVCHOST.EXE

Dropper information:
MD5: dcf79bc8ed06351bf9c127008f80490f
File size: 176128 bytes

Leave a Reply