WMOSRVSE.EXE – Trojan SuspiciousFile

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

WMOSRVSE.EXE – Trojan SuspiciousFile removal

FileMD5Virus Alias
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan SuspiciousFile
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan Generic
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan Genome
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan Downloader
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan DNAScan
WMOSRVSE.EXE d962f8855c14cc78d0dcecd2bd14f159 Trojan CI

WMOSRVSE.EXE size: 6144 bytes
WMOSRVSE.EXE hash: D962F8855C14CC78D0DCECD2BD14F159

Created files:

%WinDir%\Microsoft.NET\cmdo.vbs
%WinDir%\Microsoft.NET\dwn.exe
%WinDir%\Microsoft.NET\instsrv.exe
%WinDir%\Microsoft.NET\raabes.exe
%WinDir%\Microsoft.NET\sc.exe
%WinDir%\Microsoft.NET\srvany.exe
%WinDir%\Microsoft.NET\wmosrvse.exe
%Temporary Internet Files%\Content.IE5\1HVEIEYW\raabes[1].exe

Detected by UnHackMe:

WMOSRVSE.EXE
Default location: %WinDir%\MICROSOFT.NET\WMOSRVSE.EXE

Dropper information:
MD5: 93896b61df6a2ba81e4f56a9ff2cf2b0
File size: 252404 bytes

Leave a Reply