Solved! Use WORK.EXE (Trojan Agent) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WORK.EXE – Trojan Agent removal

FileMD5Virus Alias
WORK.EXE 22dac9cf0741605d33be3319cd8e6339 Trojan Agent

WORK.EXE size: 53248 bytes
WORK.EXE hash: 22DAC9CF0741605D33BE3319CD8E6339

Created files:

%SysDir%\work.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe work.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\mswindws: mssql.exeex

Detected by UnHackMe:

WORK.EXE
Default location: %SYSDIR%\WORK.EXE

Dropper information:
MD5: 22dac9cf0741605d33be3319cd8e6339
File size: 53248 bytes

Leave a Reply