I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
SMSS.EXE – Worm Vobfus removal
| File | MD5 | Virus Alias |
|---|---|---|
| SMSS.EXE | b41723466d900a22d2bd3073f3d9d8bc | Worm Vobfus |
| SMSS.EXE | b41723466d900a22d2bd3073f3d9d8bc | Trojan Hllw |
| SMSS.EXE | b41723466d900a22d2bd3073f3d9d8bc | Trojan Agent |
SMSS.EXE size: 46592 bytes
SMSS.EXE hash: B41723466D900A22D2BD3073F3D9D8BC
Created files:
C:\Recycled\CTFMON.EXE
C:\Recycled\SMSS.EXE
C:\Recycled\SPOOLSV.EXE
C:\Recycled\SVCHOST.EXE
Autostart registry keys:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: C:\recycled\SVCHOST.exe,
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “C:\recycled\SVCHOST.exe”
Detected by UnHackMe:
SMSS.EXE
Default location: C:\RECYCLED\SMSS.EXE
Dropper information:
MD5: 6b1a7c59f3f0443eead7d0862c60b901
File size: 46592 bytes