ehmsas.exe
ehmsas.exe
ehmsas.exesample first submit on 2009-07-13 and considered unsafe.
Description:
Threat File:ehmsas.exe
Sample Submission:2009-07-13
Processing time:2 min 16 sec
Threat type:Win32/Cryptor
Filesize:51K Bytes
Path:
C:\Windows\System32\ehmsas.exe
E:\Winnt\System32\ehmsas.exe
D:\Program Files\ehmsas.exe
MD5:mk1Sk3sicP0xyuotwu7J70j8sGQoqmxl
SHA1..:5l4B46t5jxI22wpv21Er1I3H0oy8842477UcUA0Y
SHA256:6yq55181N3l6Lq6P35aFH7O7FCv3CbKaA26WXNGMvSn0trBqR83npEWDmk1Sk3si
Report Countries:
United Kindom
United Kindom
Italy
United States
Antivirus Program Report:
Vexira :Trojan-Downloader.Win32.Agent.dpe
K7AntiVirus:Backdoor.Win32.Agent.qti
DrWeb :AdWare.Win32.SuperJuan.dfb
AbnAhnLab:Trojan-GameThief.Win32.Magania.aecw
TrendMicro:Backdoor.Win32.PcClient.hot
Need help? Post you problem on Free Malware Remove Help forum
ehmsas.exe Summary
1.Temporarily Disable System Restore;2.Reboot computer in SafeMode;3.delte ehmsas.exe virus files and kill ehmsas.exe file task process(if have);4.Delete/Modify any values added to the registry by ehmsas.exe ;5.delete IE temp files,restart the computer and run a whole scan with Kaspersky. ehmsas.exe virus files as following: