Solved! Use NET.CPL (Trojan Generic) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NET.CPL – Trojan Generic removal

File MD5 Virus Alias
NET.CPL af93b5c26d816f20416d3c815ed76a69 Trojan Generic
NET.CPL af93b5c26d816f20416d3c815ed76a69 Trojan Hllw
NET.CPL af93b5c26d816f20416d3c815ed76a69 Trojan Crypt

NET.CPL size: 180736 bytes
NET.CPL hash: AF93B5C26D816F20416D3C815ED76A69

Created files:

%SysDir%\crypto.dll
%SysDir%\lcss.exe
%SysDir%\net.cpl
%SysDir%\wlogon.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Lcss\Type: 10000000
HKLM\System\CurrentControlSet\Services\Lcss\Start: 02000000
HKLM\System\CurrentControlSet\Services\Lcss\DisplayName: 8A?5BG5@ A8AB5<=KE A>1KB89
HKLM\System\CurrentControlSet\Services\Lcss\ImagePath: %WinDir%\System32\lcss.exe
HKLM\System\CurrentControlSet\Services\Lcss\Description: 15A?5G8205B ?>445@6:C A>1KB89 8 157>?0A=>ABL CAB0=>2:8 ?@>3@0<<=>3> >15A?5G5=8O.

Detected by UnHackMe:

NET.CPL
Default location: %SYSDIR%\NET.CPL

Dropper information:
MD5: c5bf6a741382d5571f53b8abcd45d210
File size: 201728 bytes

Leave a Reply