Solved! Use MSBEO32.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSBEO32.EXE – Trojan Agent removal

File MD5 Virus Alias
MSBEO32.EXE c10def02bd113d4062213371b517528a Trojan Agent
MSBEO32.EXE c10def02bd113d4062213371b517528a Trojan Generic
MSBEO32.EXE c10def02bd113d4062213371b517528a Trojan Small

MSBEO32.EXE size: 730425 bytes
MSBEO32.EXE hash: C10DEF02BD113D4062213371B517528A

Created files:

%WinDir%\spoolsv.exe
%SysDir%\concp32.exe
%SysDir%\explorer.exe
%SysDir%\msbeo32.exe
%SysDir%\vcl32.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{E4883584-8B9A-11D5-EBA1-F78EEEEEE983}\StubPath: msbeo32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\VCL: vcl32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\VCL: vcl32.exe

Detected by UnHackMe:

MSBEO32.EXE
Default location: %SYSDIR%\MSBEO32.EXE

Dropper information:
MD5: 6b60e365f3d6e7b187b16cc8699f36b0
File size: 705830 bytes

Leave a Reply