Solved! Use LCSS.EXE (Trojan Crypt) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

LCSS.EXE – Trojan Crypt removal

File MD5 Virus Alias
LCSS.EXE fe8081b9d213d0d1301489efc3a9b287 Trojan Crypt
LCSS.EXE fe8081b9d213d0d1301489efc3a9b287 Trojan Hllw

LCSS.EXE size: 195584 bytes
LCSS.EXE hash: FE8081B9D213D0D1301489EFC3A9B287

Created files:

%SysDir%\crypto.dll
%SysDir%\lcss.exe
%SysDir%\net.cpl
%SysDir%\wlogon.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Lcss\Type: 10000000
HKLM\System\CurrentControlSet\Services\Lcss\Start: 02000000
HKLM\System\CurrentControlSet\Services\Lcss\DisplayName: 8A?5BG5@ A8AB5<=KE A>1KB89
HKLM\System\CurrentControlSet\Services\Lcss\ImagePath: %WinDir%\System32\lcss.exe
HKLM\System\CurrentControlSet\Services\Lcss\Description: 15A?5G8205B ?>445@6:C A>1KB89 8 157>?0A=>ABL CAB0=>2:8 ?@>3@0<<=>3> >15A?5G5=8O.

Detected by UnHackMe:

LCSS.EXE
Default location: %SYSDIR%\LCSS.EXE

Dropper information:
MD5: c5bf6a741382d5571f53b8abcd45d210
File size: 201728 bytes

Leave a Reply