Solved! Use SVCHOST.EXE (Backdoor Farfli) Removal Guide

I will tell you in this post how to fix the issue manually and how to clean it automatically using a special powerful removal tool. You can download the removal program for free here:

Manual removal instructions:

SVCHOST.EXE – Backdoor Farfli removal

File MD5 Virus Alias
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Backdoor Farfli
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Trojan PcClient
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Trojan Generic
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Trojan Eldorado
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Trojan PAM
SVCHOST.EXE 0e5ed49d2c83c2c34031f0c3712bd479 Trojan Graftor

SVCHOST.EXE size: 287744 bytes
SVCHOST.EXE hash: 0E5ED49D2C83C2C34031F0C3712BD479

Created files:

%Program Files%\DbProtectSupport\svchost.exe
%Program Files%\DbProtectSupport\svchost.exe.bak

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\DbProtectSupport\Type: 10000000
HKLM\System\CurrentControlSet\Services\DbProtectSupport\Start: 02000000
HKLM\System\CurrentControlSet\Services\DbProtectSupport\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\DbProtectSupport\ImagePath: %Program Files%\DbProtectSupport\svchost.exe

Detected by UnHackMe:

SVCHOST.EXE
Default location: %PROGRAM FILES%\DBPROTECTSUPPORT\SVCHOST.EXE

Dropper information:
MD5: 0bed5fbe6172b4da68950a69f73a6655
File size: 573492 bytes