SVCHOST.EXE – Trojan Agent

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVCHOST.EXE – Trojan Agent removal

File MD5 Virus Alias
SVCHOST.EXE c584794b9b83e57152e00bd1a63eb94f Trojan Agent
SVCHOST.EXE c584794b9b83e57152e00bd1a63eb94f Trojan SuspiciousFile
SVCHOST.EXE c584794b9b83e57152e00bd1a63eb94f Trojan Generic

SVCHOST.EXE size: 136704 bytes
SVCHOST.EXE hash: C584794B9B83E57152E00BD1A63EB94F

Created files:

%Program Files%\DNSProtectSupport\svchost.exe
%Program Files%\DNSProtectSupport\svchost.exe.bak
%TEMP%\EzUbCK.exe
%TEMP%\gWQeGgw.exe
%TEMP%\LYXwvbdqgLcz.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\DNSProtectSupport\Type: 10000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\Start: 02000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\DNSProtectSupport\ImagePath: %Program Files%\DNSProtectSupport\svchost.exe

Detected by UnHackMe:

SVCHOST.EXE
Default location: %PROGRAM FILES%\DNSPROTECTSUPPORT\SVCHOST.EXE

Dropper information:
MD5: 006c54c44e4fe4f70f4817121dd23fce
File size: 474960 bytes

Leave a Reply