SVHOST.EXE is Backdoor Maximus
The program SVHOST.EXE is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with SVHOST.EXE.
Download for free: http://www.unhackme.com
Malware Analysis of SVHOST.EXE
Full path on a computer: %Appdata%\svhost.exe
Detected by UnHackMe:
SVHOST.EXE
Default location: %Appdata%\svhost.exe
Removal Results: Success
Number of reboot: 1
SVHOST.EXE is known as:
Backdoor.Maximus, Worm.Ainslot, Worm.Shakblades, Worm.BlackControl
SVHOST.EXE hash:
- MD5: eb891e8e6178ac00c8bc8abb98322b87
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect SVHOST.EXE presence?
Registry:
Files:
Registry:- HKLM\Software\Microsoft\Active Setup\Installed Components\{2113BD56-BCFA-8F98-FE89-C7ACC8DF63BE}\StubPath: “%Appdata%\svhost.exe”
- HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\run\Windows Defender: “%Appdata%\svhost.exe”
- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: “%Appdata%\svhost.exe”
- HKCU\Software\Microsoft\Active Setup\Installed Components\{2113BD56-BCFA-8F98-FE89-C7ACC8DF63BE}\StubPath: “%Appdata%\svhost.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender: “%Appdata%\svhost.exe”
Files:- %Appdata%\Crese
- %Appdata%\svhost.exe
Recommended: UnHackMe anti-rootkit and anti-malware
Premium software: RegRun Security Suite (Good choice for removal and protection)
