|
|
Malware Tests - removal of the newest malware.
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Get it! |
 %sysdir%\drivers\smss.exe - Dangerous
%SysDir%\drivers\smss.exe is Trojan/Backdoor. Kill the process %SysDir%\drivers\smss.exe and remove %SysDir%\drivers\smss.exe from Windows startup. File: C:\sand-box\adware_crypt.exe Classification: Antivirus Version Last Update Result Avast 4.8.1335.0 2009.06.21 - AVG 8.5.0.339 2009.06.22 SHeur2.AMBU BitDefender 7.2 2009.06.22 - Comodo 1387 2009.06.22 - DrWeb 5.0.0.12182 2009.06.22 - F-Secure 8.0.14470.0 2009.06.21 - Kaspersky 7.0.0.125 2009.06.22 Trojan.Win32.Agent.cmyl NOD32 4175 2009.06.21 - Symantec 1.4.4.12 2009.06.22 - Additional information File size: 35328 bytes MD5 : a701f613ba36e7cbc6331e5a8d419fc8 SHA1 : 4427296fdf6a937641ac9e2517796ecc9d4aff5c Installation When the program is executed, it creates the following registry subkeys and values: ---------------------------------- Keys added:0 ---------------------------------- ---------------------------------- Values added:0 ---------------------------------- ---------------------------------- Values modified:2 ---------------------------------- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: "C:\WINDOWS\system32\userinit.exe," HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: "C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\drivers\smss.exe" ---------------------------------- Files added:1 ---------------------------------- C:\WINDOWS\system32\drivers\smss.exe ---------------------------------- Files deleted:1 ---------------------------------- C:\sand-box\adware_crypt.exe ---------------------------------- Files [attributes?] modified:0 ---------------------------------- ---------------------------------- Folders added:0 ---------------------------------- ---------------------------------- Folders deleted:0 ---------------------------------- ---------------------------------- Total changes:4 ---------------------------------- ------------------------------------------------------------------------------------- Detected by RegRun Reanimator: Type: UserInit Value Author: Unknown Item Name: UserInit Related File: C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\drivers\smss.exe Removal Results: Success Number of reboot: 1 Recommended software: UnHackMe anti-rootkit and anti-malware http://www.unhackme.com RegRun Security Suite (Good choice for removal and protection) http://www.regrun.com Removal: %sysdir%\drivers\smss.exe is removed by RegRun.
Click on the "Get it out!" button.  We suggest you to reboot your computer to be sure that your computer is clean now. Do not hesitate to contact us: Support center
UnHackMe - Rootkit/Malware killer
Also recommended software: UnHackMe is a part of RegRun Security Suite Platinum.
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: November 16 2009
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
Download RegRun Suite. 
Open an executable file to start program installation.
