SRVANY.EXE – Unclassified Malware removal

SRVANY.EXE size: 15872 bytes
SRVANY.EXE hash: F3CA8234F60EBA24604B5A9390D2FED5

Created files:

%WinDir%\Microsoft.NET\cmdo.vbs
%WinDir%\Microsoft.NET\dwn.exe
%WinDir%\Microsoft.NET\instsrv.exe
%WinDir%\Microsoft.NET\raabes.exe
%WinDir%\Microsoft.NET\sc.exe
%WinDir%\Microsoft.NET\srvany.exe
%WinDir%\Microsoft.NET\wmosrvse.exe
%Temporary Internet Files%\Content.IE5\1HVEIEYW\raabes[1].exe

Detected by UnHackMe:

SRVANY.EXE
Default location: %WinDir%\MICROSOFT.NET\SRVANY.EXE

Dropper information:
MD5: 93896b61df6a2ba81e4f56a9ff2cf2b0
File size: 252404 bytes