INSTSRV.EXE – Trojan InstSrv

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

INSTSRV.EXE – Trojan InstSrv removal

FileMD5Virus Alias
INSTSRV.EXE 7bc1928cd1d6ea2bce5fdb1fdeac0b3d Trojan InstSrv

INSTSRV.EXE size: 37888 bytes
INSTSRV.EXE hash: 7BC1928CD1D6EA2BCE5FDB1FDEAC0B3D

Created files:

%WinDir%\Microsoft.NET\cmdo.vbs
%WinDir%\Microsoft.NET\dwn.exe
%WinDir%\Microsoft.NET\instsrv.exe
%WinDir%\Microsoft.NET\raabes.exe
%WinDir%\Microsoft.NET\sc.exe
%WinDir%\Microsoft.NET\srvany.exe
%WinDir%\Microsoft.NET\wmosrvse.exe
%Temporary Internet Files%\Content.IE5\1HVEIEYW\raabes[1].exe

Detected by UnHackMe:

INSTSRV.EXE
Default location: %WinDir%\MICROSOFT.NET\INSTSRV.EXE

Dropper information:
MD5: 93896b61df6a2ba81e4f56a9ff2cf2b0
File size: 252404 bytes

Leave a Reply