Solved! Use LSASS.EXE (Trojan Downloader) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

LSASS.EXE – Trojan Downloader removal

File MD5 Virus Alias
LSASS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Downloader
LSASS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Generic
LSASS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Hllw
LSASS.EXE d4f7f33037bcdc3ad2713f12ed323299 Worm Autorun
LSASS.EXE d4f7f33037bcdc3ad2713f12ed323299 Trojan Agent

LSASS.EXE size: 130050 bytes
LSASS.EXE hash: D4F7F33037BCDC3AD2713F12ED323299

Created files:

C:\windows\system32\~A~m~B~u~R~a~D~u~L~\csrss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\lsass.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\services.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\smss.exe
C:\windows\system32\~A~m~B~u~R~a~D~u~L~\winlogon.exe

Detected by UnHackMe:

LSASS.EXE
Default location: %SYSDIR%\~A~M~B~U~R~A~D~U~L~\LSASS.EXE

Dropper information:
MD5: 672fb9cea8a89536c2c7708bb08adfd6
File size: 130050 bytes

Leave a Reply