|
|
Detect and remove hidden rootkits using
UnHackMe
RegRun Security Suite = 24 system utilities for protecting your computer. Try now! |
 w32_ss.exe - Dangerous
Once launched, the program installs itself in the Windows system directory as w32_ss.exe It then installs the other program modules to the victim machine: debugg.dll - main module sdmapi.sys * boot32.sys * c3.dll * c3.sys * c4.sys * The Trojan installs itself in the system registry. In systems running Windows 9x: [HKLM\System\CurrentControlSet\Control\MPRServices\TestService] DllName="debugg.dll" EntryPoint="MemManager" StackSize=0 In systems running Windows NT/2000/XP: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\debugg] DllName="debugg.dll" Startup="MemManager" Impersonate=1 Asynchronous=1 MaxWait=1 Removal: w32_ss.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software: RegRun Security Suite - removal and protection. http://www.regrun.com RegRun Reanimator - free removal tool. greatis.com/reanimator
What is hidden in MSDN? Why software developers prefer Win32.FreeTechSecrets.com? All Unix Manuals in Alphabetical Order C# controls for .NET in 3 simple steps. Constantly updated. Last update: May 12 2008
Interesting information about Vista programs... Need consultation? Would you like to add your opinion?
|
|
