svonost.exe – Trojan Generic removal

Created files:

C:\windows\svonost.exe – Trojan Generic

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\Type: 10000000
HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\Start: 02000000
HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\DisplayName: Windows Network Cenfig
HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\ImagePath: C:\windows\svonost.exe
HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\SBIE_Win32ExitCode: FFFFFFFF
HKLM\System\CurrentControlSet\Services\Windows Network Config\SBIE_Win32ExitCode: FFFFFFFF

Detected by UnHackMe:

svonost.exe
Default location: C:\windows\svonost.exe

Dropper information:
SHA256: e079968a078d6efa9d99c2e3bfac5d9966150178e0e845aec679c4befa5bb44c
SHA1: 263cec6c0e5e9e1b87030a2e40b005b62415f94d
MD5: e20755a262dd3ce02ec8258997e07f67
File size: 174080 bytes