The program SVONOST.EXE is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with SVONOST.EXE.
Download for free: http://www.unhackme.com
Malware Analysis of SVONOST.EXE
Full path on a computer: %WinDir%\svonost.exe
Detected by UnHackMe:
SVONOST.EXE
Default location: %WinDir%\svonost.exe
Removal Results: Success
Number of reboot: 1
SVONOST.EXE is known as:
Backdoor.Vonost.22DA
SVONOST.EXE hash:
- MD5: 3cc9afb2729406c9e755344065b0cfc5
How to quickly detect SVONOST.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\Type: 0×00000010
- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\Start: 0×00000002
- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\ErrorControl: 0×00000001
- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\ImagePath: “C:\windows\svonost.exe”
- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\DisplayName: “Windows Network Cenfig”
- HKLM\System\CurrentControlSet\Services\Windows Network Cenfig\ObjectName: “LocalSystem”
Files:- %WinDir%\svonost.exe