MSSRV32.EXE – Trojan Downloader

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

MSSRV32.EXE – Trojan Downloader removal

File MD5 Virus Alias
MSSRV32.EXE 97fe565d2160dd4e834f897b77cabf8f Trojan Downloader
MSSRV32.EXE 97fe565d2160dd4e834f897b77cabf8f Backdoor RBot
MSSRV32.EXE 97fe565d2160dd4e834f897b77cabf8f Trojan Agent
MSSRV32.EXE 97fe565d2160dd4e834f897b77cabf8f Trojan Small

MSSRV32.EXE size: 22016 bytes
MSSRV32.EXE hash: 97FE565D2160DD4E834F897B77CABF8F

Created files:

C:\windows\system32\mssrv32.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\AFD\Parameters\DisableRawSecurity: 01000000
HKLM\System\CurrentControlSet\Services\msupdate\ImagePath: c:\windows\System32\mssrv32.exe
HKLM\System\CurrentControlSet\Services\msupdate\DisplayName: Microsoft security update service
HKLM\System\CurrentControlSet\Services\msupdate\Description: This service downloading and installing Windows security updates
HKLM\System\CurrentControlSet\Services\msupdate\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\msupdate\Start: 02000000
HKLM\System\CurrentControlSet\Services\msupdate\Type: 10000000

Detected by UnHackMe:

MSSRV32.EXE
Default location: %SYSDIR%\MSSRV32.EXE

Dropper information:
MD5: 97fe565d2160dd4e834f897b77cabf8f
File size: 22016 bytes

Leave a Reply