Categories: Trojan

Trojan:Win32/SMSer.F removal tips

The Trojan:Win32/SMSer.F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/SMSer.F virus can do?

Executable code extraction
Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

How to determine Trojan:Win32/SMSer.F?


File Info:
crc32: 13B14BCEmd5: 06d972923892ee93ca6a86f7cee4e6cbname: 06D972923892EE93CA6A86F7CEE4E6CB.mlwsha1: a100a45e6b1b22ccad1bc7082600dbe7d6f8e07dsha256: bdac1a0c8c70146cc7aeb4097a2e2fba55ccb29315faca0edf137b8d5ca3665asha512: 47201125092852c3345224b15f46a6d08d0bc72637b0e4cd4cc6bffb35693e9c424b3dc269393324e53c6c73d760a437cb833e699470d304997cc8687b613916ssdeep: 96:gsxvprob++vLXCNQlXk+v4cJdHR7jnVj78qRu/yNGUODxmWUH1DVWVNpTOMdZB:gko7CNQlUaJnVHQ/yijUVDkj0MvBtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: InternalName: FileVersion: CompanyName: ProductName: OleSelfRegister: ProductVersion: FileDescription: OriginalFilename: Translation: 0x0409 0x04b0

Trojan:Win32/SMSer.F also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Trojan.Heur.VP.amKfay6iVcpi
ALYac	Gen:Trojan.Heur.VP.amKfay6iVcpi
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic.pak!cobra
AegisLab	Trojan.Win32.Generic.l5Bd
Sangfor	Trojan.Win32.AGEN.1038553
K7AntiVirus	Trojan ( 001003581 )
BitDefender	Gen:Trojan.Heur.VP.amKfay6iVcpi
K7GW	Trojan ( 001003581 )
Cybereason	malicious.23892e
BitDefenderTheta	AI:Packer.5346FB041F
Cyren	W32/Risk.LKEG-8709
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/LockScreen.CH
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan-Ransom.Win32.PornoAsset.cral
Alibaba	Trojan:Win32/PornoAsset.e9d01e1c
NANO-Antivirus	Trojan.Win32.PornoAsset.edjatv
Rising	Ransom.PornoAsset!8.6AA (CLOUD)
Ad-Aware	Gen:Trojan.Heur.VP.amKfay6iVcpi
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Autorun.JT@4zqndt
F-Secure	Trojan.TR/Ransom.VB.AQ
DrWeb	Trojan.Winlock.407
Zillya	Trojan.FakeAV.Win32.7251
TrendMicro	TROJ_RANSVB.SMA
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.xh
FireEye	Gen:Trojan.Heur.VP.amKfay6iVcpi
Emsisoft	Gen:Trojan.Heur.VP.amKfay6iVcpi (B)
Ikarus	Trojan-Ransom.Fullscreen
Jiangmin	Trojan.Chameleon.a
eGambit	Generic.Malware
Avira	TR/Ransom.VB.AQ
MAX	malware (ai score=98)
Antiy-AVL	Trojan[Ransom]/Win32.PornoAsset
Microsoft	Trojan:Win32/SMSer.F
Arcabit	Trojan.Heur.VP.amKfay6iVcpi
ZoneAlarm	Trojan-Ransom.Win32.PornoAsset.cral
GData	Gen:Trojan.Heur.VP.amKfay6iVcpi
Cynet	Malicious (score: 100)
McAfee	Artemis!06D972923892
VBA32	SScope.Trojan.Validium.va
Malwarebytes	Malware.Heuristic.1003
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_RANSVB.SMA
Tencent	Win32.Trojan.Fullscreen.cpl
Yandex	Trojan.VB!wAyuuEADBV4
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1020339.susgen
Fortinet	W32/Generic.AC.35333E!tr
Webroot	Trojan:Win32/SMSer.F
AVG	FileRepMalware
Qihoo-360	Win32/Ransom.PornoAsset.HwsB4lkA