Solved! Use SDHELP.EXE (Trojan Downloader) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SDHELP.EXE – Trojan Downloader removal

File MD5 Virus Alias
SDHELP.EXE d849786f1c4e63be024a6a3c7fcb8a00 Trojan Downloader
SDHELP.EXE d849786f1c4e63be024a6a3c7fcb8a00 Trojan XPACK
SDHELP.EXE d849786f1c4e63be024a6a3c7fcb8a00 Trojan Generic
SDHELP.EXE d849786f1c4e63be024a6a3c7fcb8a00 Trojan Xema
SDHELP.EXE d849786f1c4e63be024a6a3c7fcb8a00 Trojan Crypt

SDHELP.EXE size: 15877 bytes
SDHELP.EXE hash: D849786F1C4E63BE024A6A3C7FCB8A00

Created files:

%SysDir%\IME\sdhelp.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “%WinDir%\System32\IME\sdhelp.exe”

Detected by UnHackMe:

SDHELP.EXE
Default location: %SYSDIR%\IME\SDHELP.EXE

Dropper information:
MD5: d849786f1c4e63be024a6a3c7fcb8a00
File size: 15877 bytes

Leave a Reply