SPOOLSV.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SPOOLSV.EXE – Trojan Agent removal

FileMD5Virus Alias
SPOOLSV.EXE da7ef73badd6b1f5718bf95d92ea68cb Trojan Agent
SPOOLSV.EXE da7ef73badd6b1f5718bf95d92ea68cb Trojan Xema
SPOOLSV.EXE da7ef73badd6b1f5718bf95d92ea68cb Trojan Hllw

SPOOLSV.EXE size: 46592 bytes
SPOOLSV.EXE hash: DA7EF73BADD6B1F5718BF95D92EA68CB

Created files:

C:\Recycled\CTFMON.EXE
C:\Recycled\SMSS.EXE
C:\Recycled\SPOOLSV.EXE
C:\Recycled\SVCHOST.EXE

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: C:\recycled\SVCHOST.exe,
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “C:\recycled\SVCHOST.exe”

Detected by UnHackMe:

SPOOLSV.EXE
Default location: C:\RECYCLED\SPOOLSV.EXE

Dropper information:
MD5: 0e947329d9c3b9973e46c56c504f540e
File size: 46592 bytes

Leave a Reply