SVHOSR.EXE – Trojan Kazy

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

SVHOSR.EXE – Trojan Kazy removal

File MD5 Virus Alias
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan Kazy
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan BadReputation
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan SuspiciousFile
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan Artemis
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan Generic
SVHOSR.EXE 04fae4dca43438c53d172d7cfdee00f1 Trojan DNAScan

SVHOSR.EXE size: 749568 bytes
SVHOSR.EXE hash: 04FAE4DCA43438C53D172D7CFDEE00F1

Created files:

%SysDir%\SVHOSR.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\ConnectGroup: ??????
HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\MarkTime: 2013-06-28 04:52
HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\Type: 10010000
HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\Start: 02000000
HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\DisplayName: Hjitpl utsgrgbl
HKLM\System\CurrentControlSet\Services\Moewwe eaznfa\ImagePath: %WinDir%\System32\SVHOSR.exe
HKLM\System\CurrentControlSet\Services\Ruwlta iescwymu\ReleiceName: Moewwe eaznfa

Detected by UnHackMe:

SVHOSR.EXE
Default location: %SYSDIR%\SVHOSR.EXE

Dropper information:
MD5: 04fae4dca43438c53d172d7cfdee00f1
File size: 749568 bytes

Leave a Reply