I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Free Download Fully Functional 30-day Trial. No credit card is required.
Reviews. EULA. Privacy Policy. Uninstall.
Trojan Swisyn
Also known as: Trojan Agent, Trojan Downloader.Generic
SHA256: 908dff8b843d915f9ccb3b2fc65fe23031c354bdb084f6adac21cc26595584a6
SHA1: 73458a8f21759a3d5d58fefbdb1103956be88fb8
MD5: c2d73568f4e4d82b2b3f46e9292a81c9
File size: 296960 bytes
Created files:
%Program Files Common%\Services\csboyDVD.dll – Trojan Swisyn
%Program Files Common%\Services\csboyDvd.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTj.ocx – Trojan Swisyn
%Program Files Common%\Services\csboyTT.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8888.dll – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8AuTo.ocx – Trojan Swisyn
%Program Files Common%\Tencent\AMGR8Dw.ocx – Trojan Swisyn
%Program Files Common%\Tencent\svchest.exe – Trojan Swisyn
%WinDir%\TEMP\new_av.exe_BB75EDE1EE50EF7818CA083E52115D6B575BAA10.exe – Trojan Swisyn
Trojan Swisyn created autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ttplay: %Program Files Common%\Tencent\svchest.exe
HKLM\System\CurrentControlSet\Services\diskmanage\Type: 10000000
HKLM\System\CurrentControlSet\Services\diskmanage\Start: 02000000
HKLM\System\CurrentControlSet\Services\diskmanage\DisplayName: windows Disk Manager
HKLM\System\CurrentControlSet\Services\diskmanage\ImagePath: %Program Files Common%\Tencent\AMGR8888.dll