Solved! Use SLKZXBY.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SLKZXBY.EXE – Trojan Agent removal

FileMD5Virus Alias
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Trojan Agent
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Worm (Suspicious File)
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Trojan Artemis
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Trojan Generic
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Trojan Eldorado
SLKZXBY.EXE b9274c8a135ca48de4542cfce904f21d Trojan Downloader

SLKZXBY.EXE size: 20992 bytes
SLKZXBY.EXE hash: B9274C8A135CA48DE4542CFCE904F21D

Created files:

%Program Files%\Microsoft Zdscdn\Slkzxby.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\MarkTime: 2016-09-28 06:14
HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\Type: 10010000
HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\Start: 02000000
HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\DisplayName: Spqwvj znohxmin
HKLM\System\CurrentControlSet\Services\Wsdrjn ohqnfnqi\ImagePath: %Program Files%\Microsoft Zdscdn\Slkzxby.exe

Detected by UnHackMe:

SLKZXBY.EXE
Default location: %PROGRAM FILES%\MICROSOFT ZDSCDN\SLKZXBY.EXE

Dropper information:
MD5: b9274c8a135ca48de4542cfce904f21d
File size: 20992 bytes

Leave a Reply