Solved! Use SVCH0ST.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SVCH0ST.EXE – Trojan Agent removal

FileMD5Virus Alias
SVCH0ST.EXE 4766b32db089fe85db28681af5373085 Trojan Agent
SVCH0ST.EXE 4766b32db089fe85db28681af5373085 Trojan Generic
SVCH0ST.EXE 4766b32db089fe85db28681af5373085 Trojan CI

SVCH0ST.EXE size: 252416 bytes
SVCH0ST.EXE hash: 4766B32DB089FE85DB28681AF5373085

Created files:

%Program Files%\DbSecuritySpt\DbSecuritySpt.exe
%Program Files%\DbSecuritySpt\SESDKDummy.dll
%Program Files%\DbSecuritySpt\svch0st.exe
%Common AppData%\Microsoft\Dr Watson\user.dmp

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\DbSecuritySpt\Type: 10000000
HKLM\System\CurrentControlSet\Services\DbSecuritySpt\Start: 02000000
HKLM\System\CurrentControlSet\Services\DbSecuritySpt\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\DbSecuritySpt\ImagePath: %Program Files%\DbSecuritySpt\DbSecuritySpt.exe

Detected by UnHackMe:

SVCH0ST.EXE
Default location: %PROGRAM FILES%\DBSECURITYSPT\SVCH0ST.EXE

Dropper information:
MD5: cbb37b643df9a3730e235ebe2514167b
File size: 462848 bytes

Leave a Reply