Trojan Small – mssrv32.exe – 79642aa8ae971b5e655cc5e4b989c133

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Small
Also known as: Trojan Agent, Trojan Buzus
SHA256: b81f4f21017f38ee51e25e23a4357dae649554e43bd55f9a4840262af7f51144
SHA1: ee12fc5dfdf42658d713c11d095627e4f1b4670e
MD5: 79642aa8ae971b5e655cc5e4b989c133
File size: 23040 bytes

Created files:

C:\windows\system32\mssrv32.exe – Trojan Small

Trojan Small created autostart registry keys:

HKLM\System\CurrentControlSet\Services\AFD\Parameters\DisableRawSecurity: 01000000
HKLM\System\CurrentControlSet\Services\msupdate\ImagePath: c:\windows\System32\mssrv32.exe
HKLM\System\CurrentControlSet\Services\msupdate\DisplayName: Microsoft security update service
HKLM\System\CurrentControlSet\Services\msupdate\Description: This service downloading and installing Windows security updates
HKLM\System\CurrentControlSet\Services\msupdate\ObjectName: LocalSystem
HKLM\System\CurrentControlSet\Services\msupdate\Start: 02000000
HKLM\System\CurrentControlSet\Services\msupdate\Type: 10000000

Leave a Reply