Solved! Use SMSS32.EXE (Trojan Krap) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SMSS32.EXE – Trojan Krap removal

FileMD5Virus Alias
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan Krap
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan XPACK
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan Generic
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan Eldorado
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan Downloader
SMSS32.EXE 19df280a2d1781ab2923ed25a051863e Trojan Agent

SMSS32.EXE size: 240128 bytes
SMSS32.EXE hash: 19DF280A2D1781AB2923ED25A051863E

Created files:

C:\s
%SysDir%\smss32.exe
%SysDir%\winlogon32.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\smss32.exe: %WinDir%\System32\smss32.exe
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: %WinDir%\System32\winlogon32.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\smss32.exe: %WinDir%\System32\smss32.exe

Detected by UnHackMe:

SMSS32.EXE
Default location: %SYSDIR%\SMSS32.EXE

Dropper information:
MD5: 19df280a2d1781ab2923ed25a051863e
File size: 240128 bytes

Leave a Reply