SVCHOST.EXE – Virus Sality

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVCHOST.EXE – Virus Sality removal

File MD5 Virus Alias
SVCHOST.EXE 5bf66bfd220744aa60fd54d5156b5460 Virus Sality
SVCHOST.EXE 5bf66bfd220744aa60fd54d5156b5460 Trojan Bitcoin
SVCHOST.EXE 5bf66bfd220744aa60fd54d5156b5460 Trojan SuspiciousFile
SVCHOST.EXE 5bf66bfd220744aa60fd54d5156b5460 Trojan CoinMiner
SVCHOST.EXE 5bf66bfd220744aa60fd54d5156b5460 Trojan Krap

SVCHOST.EXE size: 130048 bytes
SVCHOST.EXE hash: 5BF66BFD220744AA60FD54D5156B5460

Created files:

%WinDir%\Temp\coinutil.dll
%WinDir%\Temp\hstart.exe
%WinDir%\Temp\miner.dll
%WinDir%\Temp\mpir.dll
%WinDir%\Temp\openssl.dll
%WinDir%\Temp\phatk.cl
%WinDir%\Temp\scrypt.cl
%WinDir%\Temp\svchost.exe
%WinDir%\Temp\usft_ext.dll

Detected by UnHackMe:

SVCHOST.EXE
Default location: %TEMP%\SVCHOST.EXE

Dropper information:
MD5: 71f050b10715ee0121dd8db375c8cde5
File size: 1135989 bytes

Leave a Reply