Solved! Use PERFHOST.EXE (Trojan Graftor) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

PERFHOST.EXE – Trojan Graftor removal

FileMD5Virus Alias
PERFHOST.EXE 30cf571a18b1ce5ea0ab7959c85137e9 Trojan Graftor
PERFHOST.EXE 30cf571a18b1ce5ea0ab7959c85137e9 Trojan PcClient
PERFHOST.EXE 30cf571a18b1ce5ea0ab7959c85137e9 Trojan Generic
PERFHOST.EXE 30cf571a18b1ce5ea0ab7959c85137e9 Backdoor PcClien
PERFHOST.EXE 30cf571a18b1ce5ea0ab7959c85137e9 Trojan Agent

PERFHOST.EXE size: 360448 bytes
PERFHOST.EXE hash: 30CF571A18B1CE5EA0AB7959C85137E9

Created files:

%WinDir%\system\perfhost.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\PNRPsevc\DeleteFiles: VirusShare_30cf571a18b1ce5ea0ab7959c85137e9.EXE
HKLM\System\CurrentControlSet\Services\PNRPsevc\ConnectGroup: Arp???

Detected by UnHackMe:

PERFHOST.EXE
Default location: %WinDir%\SYSTEM\PERFHOST.EXE

Dropper information:
MD5: 30cf571a18b1ce5ea0ab7959c85137e9
File size: 360448 bytes

Leave a Reply