Solved! Use WINNETSC.EXE (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WINNETSC.EXE – Trojan Artemis removal

FileMD5Virus Alias
WINNETSC.EXE d7240a209d6d205c7d2f6f0d183f9e16 Trojan Artemis
WINNETSC.EXE d7240a209d6d205c7d2f6f0d183f9e16 Trojan SuspiciousFile
WINNETSC.EXE d7240a209d6d205c7d2f6f0d183f9e16 Trojan Generic
WINNETSC.EXE d7240a209d6d205c7d2f6f0d183f9e16 Trojan Agent

WINNETSC.EXE size: 20480 bytes
WINNETSC.EXE hash: D7240A209D6D205C7D2F6F0D183F9E16

Created files:

%SysDir%\winNetSc.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\NetStateCheck\Type: 10010000
HKLM\System\CurrentControlSet\Services\NetStateCheck\Start: 02000000
HKLM\System\CurrentControlSet\Services\NetStateCheck\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\NetStateCheck\DisplayName: Network State Protection check
HKLM\System\CurrentControlSet\Services\NetStateCheck\ImagePath: %WinDir%\System32\winNetSc.exe

Detected by UnHackMe:

WINNETSC.EXE
Default location: %SYSDIR%\WINNETSC.EXE

Dropper information:
MD5: 01fd1ebca0072be0f8ee390cb673ad27
File size: 303104 bytes

Leave a Reply