Solved! Use WSASS32.EXE (Trojan Banker) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WSASS32.EXE – Trojan Banker removal

File MD5 Virus Alias
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan Banker
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan SuspiciousFile
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan Artemis
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan Eldorado
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan Downloader
WSASS32.EXE 16fa56d6973c43617a007189f381ff93 Trojan DNAScan

WSASS32.EXE size: 812054 bytes
WSASS32.EXE hash: 16FA56D6973C43617A007189F381FF93

Created files:

%SysDir%\wsass32.exe
%AllUsersProfile%\start menu\programs\startup\wsass32.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\wsass32: %WinDir%\System32\wsass32.exe

Detected by UnHackMe:

WSASS32.EXE
Default location: %SYSDIR%\WSASS32.EXE

Dropper information:
MD5: 16fa56d6973c43617a007189f381ff93
File size: 812054 bytes

Leave a Reply