SVSHOST.EXE – Trojan SuspiciousFile

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SVSHOST.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
SVSHOST.EXE d71af4d5b887beccfbc39e7c60ff44af Trojan SuspiciousFile
SVSHOST.EXE d71af4d5b887beccfbc39e7c60ff44af Trojan Generic
SVSHOST.EXE d71af4d5b887beccfbc39e7c60ff44af Trojan Siggen

SVSHOST.EXE size: 320512 bytes
SVSHOST.EXE hash: D71AF4D5B887BECCFBC39E7C60FF44AF

Created files:

%SysDir%\svshost.exe

Autostart registry keys:

HKLM\Software\Microsoft\Active Setup\Installed Components\{74X1EYSB-26X1-FE12-3O50-5NQ00332V3SO}\StubPath: %WinDir%\System32\svshost.exe Restart
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0073007600730068006F00730074002E006500780065000000
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\HKLM: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0073007600730068006F00730074002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0073007600730068006F00730074002E006500780065000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HKCU: 43003A005C00570049004E0044004F00570053005C00730079007300740065006D00330032005C0073007600730068006F00730074002E006500780065000000

Detected by UnHackMe:

SVSHOST.EXE
Default location: %SYSDIR%\SVSHOST.EXE

Dropper information:
MD5: d71af4d5b887beccfbc39e7c60ff44af
File size: 320512 bytes

Leave a Reply