NTCSRSS.EXE – Trojan Panda

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NTCSRSS.EXE – Trojan Panda removal

FileMD5Virus Alias
NTCSRSS.EXE c1f814bfb753f7e8834b94b8104e533e Trojan Panda
NTCSRSS.EXE c1f814bfb753f7e8834b94b8104e533e Trojan Generic.KD
NTCSRSS.EXE c1f814bfb753f7e8834b94b8104e533e Worm AMN
NTCSRSS.EXE c1f814bfb753f7e8834b94b8104e533e Trojan Agent

NTCSRSS.EXE size: 125952 bytes

Created files:

%SysDir%\34787.bi
%SysDir%\ntcsrss.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\ProxyService\Type: 10000000
HKLM\System\CurrentControlSet\Services\ProxyService\Start: 02000000
HKLM\System\CurrentControlSet\Services\ProxyService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\ProxyService\ImagePath: “%WinDir%\System32\ntcsrss.exe” service

Detected by UnHackMe:

NTCSRSS.EXE
Default location: %SYSDIR%\NTCSRSS.EXE

Leave a Reply