Solved! Use MS.EXE (Adware – Unwanted Program) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

MS.EXE – Adware – Unwanted Program removal

FileMD5Virus Alias
MS.EXE accff054f119adbf106b115e9300efd2 Adware – Unwanted Program
MS.EXE accff054f119adbf106b115e9300efd2 Trojan Xema

MS.EXE size: 70656 bytes
MS.EXE hash: ACCFF054F119ADBF106B115E9300EFD2

Created files:

%WinDir%\drwtsn32.exe
%WinDir%\ml.exe
%WinDir%\ml.nkd
%WinDir%\ms.exe
%WinDir%\ms.nkd
%WinDir%\nkd.nkd
%WinDir%\ns.exe
%WinDir%\ns.nkd
%WinDir%\pv.exe
%WinDir%\pv.nkd

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer: %WinDir%\drwtsn32.exe

Detected by UnHackMe:

MS.EXE
Default location: %WinDir%\MS.EXE

Dropper information:
MD5: 03ccd38662ea18ff722cf14a7a26aa4c
File size: 489472 bytes

Leave a Reply