Trojan Crypt – syshost.exe – ad0df3fbf63104082822098bfc5af25b

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Crypt
Also known as: Trojan Generic.KD, Trojan Generic
SHA256: 0e8624f9306509aa30f11d7639c31c8cb87ac053e58a671c46bbabab1e170da7
SHA1: 6bc5070adebf0a6a9b4c50e52adfe25e5055bf6f
MD5: ad0df3fbf63104082822098bfc5af25b
File size: 347648 bytes

Created files:

%WinDir%\Installer\{61ED775B-432A-64E2-3E0C-A01F1DBAC9DA}\syshost.exe – Trojan Crypt

Trojan Crypt created autostart registry keys:

HKLM\System\CurrentControlSet\Services\syshost32\Type: 10000000
HKLM\System\CurrentControlSet\Services\syshost32\Start: 02000000
HKLM\System\CurrentControlSet\Services\syshost32\ImagePath: “%WinDir%\Installer\{61ED775B-432A-64E2-3E0C-A01F1DBAC9DA}\syshost.exe” /service
HKLM\System\CurrentControlSet\Services\syshost32\SBIE_StartTicks: 1BFA3000

Leave a Reply