I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
MS.EXE – Adware – Unwanted Program removal
| File | MD5 | Virus Alias |
|---|---|---|
| MS.EXE | accff054f119adbf106b115e9300efd2 | Adware – Unwanted Program |
| MS.EXE | accff054f119adbf106b115e9300efd2 | Trojan Xema |
MS.EXE size: 70656 bytes
MS.EXE hash: ACCFF054F119ADBF106B115E9300EFD2
Created files:
%WinDir%\drwtsn32.exe
%WinDir%\ml.exe
%WinDir%\ml.nkd
%WinDir%\ms.exe
%WinDir%\ms.nkd
%WinDir%\nkd.nkd
%WinDir%\ns.exe
%WinDir%\ns.nkd
%WinDir%\pv.exe
%WinDir%\pv.nkd
Autostart registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Explorer: %WinDir%\drwtsn32.exe
Detected by UnHackMe:
MS.EXE
Default location: %WinDir%\MS.EXE
Dropper information:
MD5: 03ccd38662ea18ff722cf14a7a26aa4c
File size: 489472 bytes