Solved! Use TXPLATFORM.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

TXPLATFORM.EXE – Trojan Agent removal

FileMD5Virus Alias
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Trojan Agent
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Trojan SuspiciousFile
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Trojan XPACK
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Trojan CI
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Worm Autorun
TXPLATFORM.EXE 00a8f9f602f9ca8bfcee40eceec32c81 Virus Sality

TXPLATFORM.EXE size: 100683 bytes
TXPLATFORM.EXE hash: 00A8F9F602F9CA8BFCEE40ECEEC32C81

Created files:

%SysDir%\drivers\TXPlatform.exe
C:\??????.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\RESSDT\Type: 01000000
HKLM\System\CurrentControlSet\Services\RESSDT\Start: 03000000
HKLM\System\CurrentControlSet\Services\RESSDT\DisplayName: RESSDT
HKLM\System\CurrentControlSet\Services\RESSDT\ImagePath: c:\z1.tmp
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Explorer: %WinDir%\System32\drivers\TXPlatform.exe

Detected by UnHackMe:

TXPLATFORM.EXE
Default location: %SYSDIR%\DRIVERS\TXPLATFORM.EXE

Dropper information:
MD5: 00a8f9f602f9ca8bfcee40eceec32c81
File size: 100683 bytes

Leave a Reply