Solved! Use WINXCFG.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WINXCFG.EXE – Trojan Agent removal

File MD5 Virus Alias
WINXCFG.EXE bf30213b41d81b53061306ebaf8c16ee Trojan Agent

WINXCFG.EXE size: 72704 bytes
WINXCFG.EXE hash: BF30213B41D81B53061306EBAF8C16EE

Created files:

%SysDir%\macromd\15 year old webcam.mpg.pif
%SysDir%\macromd\aimcracker.exe
%SysDir%\macromd\amateur slut with a huge gun.mpg.pif
%SysDir%\macromd\babes getting their tender little asses corked.mpg.pif
%SysDir%\macromd\black girl gets dildo wet.mpg.pif
%SysDir%\macromd\blonde on couch gettin tight anal fucking.mpg.pif
%SysDir%\macromd\brunette fucking in bedroom with boyfriend.mpg.pif
%SysDir%\macromd\candy stripper getting down on sick mans cock.mpg.pif
%SysDir%\macromd\career girls playing with their snatch after work.mpg.pif
%SysDir%\macromd\chubby girl fucked from all angles xxx.exe
%SysDir%\macromd\CKY3 – Bam Margera World Industries Alien Workshop.exe
%SysDir%\macromd\DivX pro key generator.exe
%SysDir%\macromd\gay stud giving head and fucking.mpg.pif
%SysDir%\macromd\hairy lezzies torching it up with hot candles.mpg.pif
%SysDir%\macromd\horny housewife looking for some action.mpg.pif
%SysDir%\macromd\hot actress heather graham naked.mpg.pif
%SysDir%\macromd\hot anita blonde doing lesbo.mpg.pif
%SysDir%\macromd\hot teeny sucking cock.mpg.pif
%SysDir%\macromd\hot tomoli lathering up sexy body for boyfriend’s tongue.mpg.pif
%SysDir%\macromd\little chicken shy about exposing sweet cunt.mpg.pif
%SysDir%\macromd\OfficeXP Keygen.exe
%SysDir%\macromd\old lady in bra and corset with dildo.mpg.pif
%SysDir%\macromd\old man fucking young blonde teen.mpg.pif
%SysDir%\macromd\patricia arquette showing her tits.mpg.pif
%SysDir%\macromd\prego housewifes large hole .mpg.pif
%SysDir%\macromd\sexy star kate hudson nude.mpg.pif
%SysDir%\macromd\sexy teen lesbians licking pussy.mpg.pif
%SysDir%\macromd\sluts who are in control of their slaves.mpg.pif
%SysDir%\macromd\spying on gals in toilet.mpg.pif
%SysDir%\macromd\sweet ass blonde teen with dripping wet pussy.mpg.pif
%SysDir%\macromd\tenderonie who insist her pussy must always be free.mpg.pif
%SysDir%\macromd\XXX Porn Passwords.exe
%SysDir%\winxcfg.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe: %WinDir%\System32\winxcfg.exe

Detected by UnHackMe:

WINXCFG.EXE
Default location: %SYSDIR%\WINXCFG.EXE

Dropper information:
MD5: 000a3d39f5802cb1b57b3bd7dce35d6c
File size: 87420 bytes

Leave a Reply