Solved! Use OFFICE.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

OFFICE.EXE – Trojan Agent removal

FileMD5Virus Alias
OFFICE.EXE 9715294b96a0fca1e6c4a6f8b1f99122 Trojan Agent
OFFICE.EXE 9715294b96a0fca1e6c4a6f8b1f99122 Trojan SuspiciousFile
OFFICE.EXE 9715294b96a0fca1e6c4a6f8b1f99122 Trojan Artemis
OFFICE.EXE 9715294b96a0fca1e6c4a6f8b1f99122 Trojan CI
OFFICE.EXE 9715294b96a0fca1e6c4a6f8b1f99122 Backdoor Farfli

OFFICE.EXE size: 53248 bytes
OFFICE.EXE hash: 9715294B96A0FCA1E6C4A6F8B1F99122

Created files:

%Program Files%\Microsoft Iawkcu\Office.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Microsoft Offices\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Microsoft Offices\MarkTime: 2014-11-18 05:33
HKLM\System\CurrentControlSet\Services\Microsoft Offices\Type: 10010000
HKLM\System\CurrentControlSet\Services\Microsoft Offices\Start: 02000000
HKLM\System\CurrentControlSet\Services\Microsoft Offices\DisplayName: Microsoft Offices
HKLM\System\CurrentControlSet\Services\Microsoft Offices\ImagePath: %Program Files%\Microsoft Iawkcu\Office.exe

Detected by UnHackMe:

OFFICE.EXE
Default location: %PROGRAM FILES%\MICROSOFT IAWKCU\OFFICE.EXE

Dropper information:
MD5: 9715294b96a0fca1e6c4a6f8b1f99122
File size: 53248 bytes

Leave a Reply