Solved! Use WINSEVEN.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINSEVEN.EXE – Trojan Agent removal

File MD5 Virus Alias
WINSEVEN.EXE 2ce97d76b30630d95da71d314a735a71 Trojan Agent
WINSEVEN.EXE 2ce97d76b30630d95da71d314a735a71 Trojan Generic
WINSEVEN.EXE 2ce97d76b30630d95da71d314a735a71 Trojan Eldorado

WINSEVEN.EXE size: 57344 bytes
WINSEVEN.EXE hash: 2CE97D76B30630D95DA71D314A735A71

Created files:

C:\WinShell\WinCon.dll
C:\WinShell\WinSeven.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WinShell: C:\WinShell\WinSeven.exe

Detected by UnHackMe:

WINSEVEN.EXE
Default location: C:\WINSHELL\WINSEVEN.EXE

Dropper information:
MD5: 2ce97d76b30630d95da71d314a735a71
File size: 57344 bytes

Leave a Reply