MBSSM32.EXE - Dangerous

What you should do about MBSSM32.EXE:

You should urgently check your PC and remove any malicious software including MBSSM32.EXE as soon as possible.

The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now.

Download Prevx CSI Now

What we know about MBSSM32.EXE:

MBSSM32.EXE

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: MBSSM32.EXE

  • Safety Rating: Known Malware, do not run
  • Malware Family: Part of Malware group - Generic Malware
  • Determination: Automatically determined using Prevx centralized heuristics
  • Malware Form: EXPLOIT
  • Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from MBSSM32.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
  • Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
  • First seen: Dec 24 2006 (GMT)
  • Last seen: Dec 24 2006 (GMT)
  • File Size: 576,512 bytes
MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: MBSSM32.EXE

  • File Names Used: 25
  • Paths Used: 40
  • Common File Name: MBSSM32.EXE
  • Common Path: %WINDIR%\SYSTEM32\
  • Vendor Information: UBS Ltd
  • Version Information: 2.1.0.144
  • MBSSM32.EXE may use 25 or more path and file names, these are the most common:
  • 1 :%honeypotroot%\2D2C56F61320A5AACD2040BE7FAA.....pmw
  • 2 :%honeypotroot%\trojans\trojan.win32.agent.afi\C5CEED0F.EXE
  • 3 :%prevxresearch%\GENERIC.MALWARE.VIR
  • 4 :%WINDIR%\SYSTEM32\MBSSM32.BAD.EXE
  • 5 :%WINDIR%\SYSTEM32\MBSSM32.EXE.BAK0
  • 6 :%WINDIR%\TEMP\_AVAST4_\UNP165470647.TMP
  • 7 :?:\!killbox\MBSSM32.EXE ( 1)
  • 8 :?:\!killbox\MBSSM32.EXE ( 2)
  • 9 :?:\!killbox\MBSSM32.EXE ( 3)
  • 10:?:\!killbox\MBSSM32.EXE( 1)
  • 11:?:\!killbox\MBSSM32.EXE( 2)
  • 12:?:\A00000000
  • 13:?:\DC1.EXE
  • 14:?:\DC5.EXE
  • 15:?:\MBSSM32.TXT.EXE
  • File Name Structure: Common
  • File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: MBSSM32.EXE

  • Malicious Objects Created: 2 objects
  • Malicious Creators: 3
  • Malware Run Keys: None
  • Self Persists:
  • Antivirus Detection: No third party antivirus detection observed
  • Anti-Spyware Detection: No third party anti-spyware detection observed

3. ACTIVITY ANALYSIS OF: MBSSM32.EXE

  • The following behaviors have been observed for this object:
  • Installs programs.
  • Deletes programs.
  • Invokes dll components.
  • Runs other programs.
  • Hijacks running processes.
  • Can hide files from the user, such as rootkits.
  • Creates known malware.
  • Creates copies of itself.
  • Hidden From Task Manager.
  • Sends Mime Emails.

4. PROPAGATION ANALYSIS OF: MBSSM32.EXE

  • Malware Group Propagation Rate: Moderate (spreading)
  • Malware Group: Generic Malware
  • Copyright Prevx Limited 2005, 2006
  Other versions of MBSSM32.EXE

Copyright Prevx Ltd
Page Generated on Nov 22, 2008 5:02