Solved! Use SVCHOST.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVCHOST.EXE – Trojan Agent removal

File MD5 Virus Alias
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan Agent
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan Generic
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan Eldorado
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan Downloader
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan Webprefix
SVCHOST.EXE 059ba0cd27dc5535f493f7cb7fe458fc Trojan FakeAV

SVCHOST.EXE size: 176128 bytes
SVCHOST.EXE hash: 059BA0CD27DC5535F493F7CB7FE458FC

Created files:

%WinDir%\temp\svchost.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\LittleBoy\Type: 10000000
HKLM\System\CurrentControlSet\Services\LittleBoy\Start: 02000000
HKLM\System\CurrentControlSet\Services\LittleBoy\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\LittleBoy\DisplayName: LittleBoy Tools
HKLM\System\CurrentControlSet\Services\LittleBoy\ImagePath: %WinDir%\temp\svchost.exe

Detected by UnHackMe:

SVCHOST.EXE
Default location: %TEMP%\SVCHOST.EXE

Dropper information:
MD5: 059ba0cd27dc5535f493f7cb7fe458fc
File size: 176128 bytes

Leave a Reply