Solved! Use WNHELP.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WNHELP.EXE – Trojan Agent removal

File MD5 Virus Alias
WNHELP.EXE c86327222d873fb4e12900a5cadcb849 Trojan Agent

WNHELP.EXE size: 302592 bytes
WNHELP.EXE hash: C86327222D873FB4E12900A5CADCB849

Created files:

%SysDir%\bkp.exe
%SysDir%\desktop.exe
%SysDir%\sr.exe
%SysDir%\wnhelp.exe
%AppData%\server.exe
%AppData%\tasks.exe

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\System: %AppData%\tasks.exe

Detected by UnHackMe:

WNHELP.EXE
Default location: %SYSDIR%\WNHELP.EXE

Dropper information:
MD5: 2488b86e6b84eca4a2f3935f204c3611
File size: 754203 bytes

Leave a Reply