|
|
UnHackMe Warrior Removing rootkits is best done from the "clean" Windows!
Blog: New viruses/malware/rootkits. Everyday!
Blog: How to remove malware/Trojans/rootkits using UnHackMe or manually. We know how to remove malware.
Shortcut Antivirus protects against Microsoft LNK and PIF vulnerability, notify a user about found threats and give possibility to immediately remove threats.
StuxnetRemover - free of charge Stuxnet/Tmphider rootkit removal tool.
|
 %windir%\clmss.exe - Dangerous
Fix it immediately
clmss.exe is used to hide files, processes and registry. clmss.exe is a kernel mode rootkit. Rootkit contacts remote hacker server using HTTP session. clmss.exe spreads via open network shares. clmss.exe opens a back door on IRC channels. clmss.exe created new system drivers: service name: "Content List Management Sub System" display name: " clmss" Adds the value: HKLM\SYSTEM\CurrentControlSet\Services\Content List Management Sub System\ to the Windows startup registry keys. hpdriver.sys is created new system driver: service name: " hpdriver" display name: " hpdriver" Added to registry: HKLM\SYSTEM\CurrentControlSet\Services\hpdriver\ Related files: %WinDir%\clmss.exe %SysDir%\hpdriver.sys Adds the value: HKLM\SYSTEM\CurrentControlSet\Services\Messenger Start 4 HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry Start 4 HKLM\SYSTEM\CurrentControlSet\Services\TlntSvr Start 4 to the Windows startup registry keys. Added to registry: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotAllowXPSP2 1 HKLM\SOFTWARE\Microsoft\Ole EnableDCOM N HKLM\SYSTEM\CurrentControlSet\Control\Lsa restrictanonymous 1 HKLM\SOFTWARE\Microsoft\Security Center\ HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\ HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\
Virus Problem? Google Redirects? Ads? Slow?
Constantly updated. Last update: February 5 2012
Fix Windows PC's Fast! Automated Software Repairs damaged & slow windows systems in 1 click.
|
|
