Solved! Use SLSCV.EXE (Worm AMN) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SLSCV.EXE – Worm AMN removal

File MD5 Virus Alias
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Worm AMN
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Trojan XPACK
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Trojan Generic
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Trojan CI
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Trojan Agent
SLSCV.EXE 8986ae3180172df13c3a349b6e8a6d42 Trojan Crypt

SLSCV.EXE size: 242176 bytes
SLSCV.EXE hash: 8986AE3180172DF13C3A349B6E8A6D42

Created files:

%SysDir%\wbem\bak.ocx
%SysDir%\wbem\counter.bak
%SysDir%\wbem\curl.exe
%SysDir%\wbem\goer.dll
%SysDir%\wbem\goer.eta
%SysDir%\wbem\libeay32.dll
%SysDir%\wbem\msvcr71.dll
%SysDir%\wbem\QtCore4.dll
%SysDir%\wbem\QtGui4.dll
%SysDir%\wbem\sleep.exe
%SysDir%\wbem\slscv.exe
%SysDir%\wbem\sphalf.exe
%SysDir%\wbem\ssleay32.dll
%SysDir%\wbem\wdgmgr.exe

Detected by UnHackMe:

SLSCV.EXE
Default location: %SYSDIR%\WBEM\SLSCV.EXE

Dropper information:
MD5: a331cd947a53258c1367e26e95dd5df1
File size: 3796263 bytes

Leave a Reply