Trojan Agent – Syssrc32.exe – 049796d52e0b760eb73998f12cdac994

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Agent
Also known as: Trojan Crypt
SHA256: 87e79069e67a8536d6dd685c0642be664314619635765ad89aafb3ffc42bec7a
SHA1: 745a1ec63802a8299e0c0fa0aae67240aba748c8
MD5: 049796d52e0b760eb73998f12cdac994
File size: 144942 bytes

Created files:

C:\Windows\Syssrc32.exe – Trojan Agent
C:\Windows\System\applets.exe – Trojan Agent
C:\Windows\System\Explorer.exe – Trojan Agent
C:\Windows\System\fndfst32.exe – Trojan Agent
C:\Windows\System\mplayerw.exe – Trojan Agent
C:\Windows\System\Sysexp32.exe – Trojan Agent

Trojan Agent created autostart registry keys:

HKLM\Software\Classes\txtfile\shell\open\command\Explore: %SystemRoot%\System32\NOTEPAD.EXE %1
HKLM\Software\Classes\txtfile\shell\open\command : C:\Windows\System\Sysexp32.exe %1
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System applets: C:\Windows\System\applets.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Syssrc32: C:\Windows\Syssrc32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\fndfst32: C:\Windows\System\fndfst32.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer Shell: C:\Windows\System\Explorer.exe

Leave a Reply