Solved! Use WLOGON.DLL (Trojan Generic) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WLOGON.DLL – Trojan Generic removal

File MD5 Virus Alias
WLOGON.DLL 38463c3e4f868a4a0d13e023d9f5dfe2 Trojan Generic
WLOGON.DLL 38463c3e4f868a4a0d13e023d9f5dfe2 Trojan Hllw
WLOGON.DLL 38463c3e4f868a4a0d13e023d9f5dfe2 Trojan Crypt

WLOGON.DLL size: 124928 bytes
WLOGON.DLL hash: 38463C3E4F868A4A0D13E023D9F5DFE2

Created files:

%SysDir%\crypto.dll
%SysDir%\lcss.exe
%SysDir%\net.cpl
%SysDir%\wlogon.dll

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\Lcss\Type: 10000000
HKLM\System\CurrentControlSet\Services\Lcss\Start: 02000000
HKLM\System\CurrentControlSet\Services\Lcss\DisplayName: 8A?5BG5@ A8AB5<=KE A>1KB89
HKLM\System\CurrentControlSet\Services\Lcss\ImagePath: %WinDir%\System32\lcss.exe
HKLM\System\CurrentControlSet\Services\Lcss\Description: 15A?5G8205B ?>445@6:C A>1KB89 8 157>?0A=>ABL CAB0=>2:8 ?@>3@0<<=>3> >15A?5G5=8O.

Detected by UnHackMe:

WLOGON.DLL
Default location: %SYSDIR%\WLOGON.DLL

Dropper information:
MD5: c5bf6a741382d5571f53b8abcd45d210
File size: 201728 bytes

Leave a Reply