|
|
Malware Tests - removal of the newest malware.
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Get it! |
 mscorewr.dll - Dangerous
Mscorewr.dll is Trojan/Backdoor. Kill the file mscorewr.dll and remove mscorewr.dll from Windows startup. File: load.exe Classification: Antivirus Version Last Update Result AVG 8.5.0.339 2009.06.24 PSW.Banker5.NSX BitDefender 7.2 2009.06.24 - Comodo 1405 2009.06.24 UnclassifiedMalware DrWeb 5.0.0.12182 2009.06.24 - F-Secure 8.0.14470.0 2009.06.24 Trojan-Downloader:W32/Agent.KYC Kaspersky 7.0.0.125 2009.06.24 Trojan.Win32.Agent2.ksk Microsoft 1.4803 2009.06.24 Trojan:Win32/Silentbanker.B NOD32 4186 2009.06.24 Win32/Spy.Silentbanker.AM Symantec 1.4.4.12 2009.06.24 Trojan.Dropper Additional information File size: 69632 bytes MD5 : 801efe85bef379e50b882f7b5846db7a SHA1 : baf73cd18d5a256f0816862b226ec34209149344 Installation When the program is executed, it creates the following registry subkeys and values: ---------------------------------- Keys added:4 ---------------------------------- HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000} HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\InprocServer32 HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\TypeLib HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000} ---------------------------------- Values added:4 ---------------------------------- HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\TypeLib\: "" HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\InprocServer32\: "C:\WINDOWS\system32\mscorewr.dll" HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\InprocServer32\ThreadingModel: "Apartment" HKLM\SOFTWARE\Classes\CLSID\{00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000}\: "mscorewr" ---------------------------------- Values modified:0 ---------------------------------- ---------------------------------- Files added:2 ---------------------------------- C:\Documents and Settings\Administrator\Local Settings\Temp\devaxswp.tmp C:\WINDOWS\system32\mscorewr.dll ---------------------------------- Files [attributes?] modified:0 ---------------------------------- ---------------------------------- Folders added:0 ---------------------------------- ---------------------------------- Folders deleted:0 ---------------------------------- ---------------------------------- Total changes:10 ---------------------------------- ------------------------------------------------------------------------------------- Detected by RegRun Reanimator: Item Name: {00009E9F-DDD7-AA59-AA7D-AA4B7D6BE000} Author: Macrovision Corporation Related File: C:\WINDOWS\system32\mscorewr.dll Type: Browser Helper Objects Removal Results: Success Number of reboot: 1 ------------------------------------------------------------------------------------- Recommended software: UnHackMe anti-rootkit and anti-malware http://www.unhackme.com RegRun Security Suite (Good choice for removal and protection) http://www.regrun.com Removal: mscorewr.dll is removed by RegRun.
Click on the "Get it out!" button.  We suggest you to reboot your computer to be sure that your computer is clean now. Do not hesitate to contact us: Support center
UnHackMe - Rootkit/Malware killer
Also recommended software: UnHackMe is a part of RegRun Security Suite Platinum.
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: November 16 2009
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
Download RegRun Suite. 
Open an executable file to start program installation.
