MSSECES.EXE
11-01-2012,09:53 door
Ik kan er niet meer aanuit.
Bij nazicht van de pc met Emsisoft(on-line check met Emsisoft HiJackFree) viel mij dit op msseces.exe
Verder op gezocht op het internet en het bleek dat op sommige sites met het beoordeelden als een kwalijk iets.(webroot en exterminate-it, malwarebytes zag het niet dacht ik en nu ga ik de Emsisoft er eens full laten overlopen)
Volgende tekst was van Exterminate-It
Blijkt dat ding daar te staan in het register onder MSC, microsoft security center??
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
En dat staat inderdaad in program files in de map Microsoft Security Client.
Nu breekt mijn klomp wel ver daar ik geen idee heb wat ik hier mee moet.
(microsoft security essentials staat op deze pc op)
Iemand die mij uit de 'nood' helpt hiermee.
Bij nazicht van de pc met Emsisoft(on-line check met Emsisoft HiJackFree) viel mij dit op msseces.exe
Verder op gezocht op het internet en het bleek dat op sommige sites met het beoordeelden als een kwalijk iets.(webroot en exterminate-it, malwarebytes zag het niet dacht ik en nu ga ik de Emsisoft er eens full laten overlopen)
Volgende tekst was van Exterminate-It
The unsafe files using this name are associated with the malware groups:
Information Stealer
Cloaked Malware
Malicious Software
File Behavior
MSSECES.EXE has been seen to perform the following behavior:
Adds a Registry Key (RUN) to auto start Programs on system start up
Writes to another Process's Virtual Memory (Process Hijacking)
Modifies the Windows Host File which could be used to stop you visiting specific web sites by redirecting you to alternative addresses without you knowing
Hooks the WININET.DLL function allowing it to read or copy Http and Https web page content and session information
Executes a Process
This process creates other processes on disk
Downloads program file(s) and other content from the web
Injects code into other processes
Performs DNS look ups to resolve URL IP addresses
The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
The Process is packed and/or encrypted using a software packing process
MSSECES.EXE has been the subject of the following behavior:
Added as a Registry auto start to load Program on Boot up
Created as a process on disk
Executed as a Process
Has code inserted into its Virtual Memory space by other programs
Terminated as a Process
Executed from Temporary Folders
This program is often downloaded from the web
Information Stealer
Cloaked Malware
Malicious Software
File Behavior
MSSECES.EXE has been seen to perform the following behavior:
Adds a Registry Key (RUN) to auto start Programs on system start up
Writes to another Process's Virtual Memory (Process Hijacking)
Modifies the Windows Host File which could be used to stop you visiting specific web sites by redirecting you to alternative addresses without you knowing
Hooks the WININET.DLL function allowing it to read or copy Http and Https web page content and session information
Executes a Process
This process creates other processes on disk
Downloads program file(s) and other content from the web
Injects code into other processes
Performs DNS look ups to resolve URL IP addresses
The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
The Process is packed and/or encrypted using a software packing process
MSSECES.EXE has been the subject of the following behavior:
Added as a Registry auto start to load Program on Boot up
Created as a process on disk
Executed as a Process
Has code inserted into its Virtual Memory space by other programs
Terminated as a Process
Executed from Temporary Folders
This program is often downloaded from the web
Blijkt dat ding daar te staan in het register onder MSC, microsoft security center??
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
En dat staat inderdaad in program files in de map Microsoft Security Client.
Nu breekt mijn klomp wel ver daar ik geen idee heb wat ik hier mee moet.
(microsoft security essentials staat op deze pc op)
Iemand die mij uit de 'nood' helpt hiermee.
