We received the file VSS.EXE and detected that VSS.EXE is not good.
VSS.EXE is Adware. You should remove the file VSS.EXE.
Kill the process VSS.EXE and remove VSS.EXE from Windows.
Malware Analysis of VSS.EXE
Full path on a computer: %Profile%\VSS.exe
Detected by UnHackMe:
VSS.EXE
Default location: %Profile%\VSS.exe
Removal Results: Success
Number of reboot: 1
VSS.EXE is known as:
Adware.Joke.ScreenMate.AA
VSS.EXE hash:
- MD5: b205f94471677aadca9362023b65d001
The file tries to connect to the dangerous web site.
How to quickly detect VSS.EXE presence?
Registry:
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\VSS: “%Profile%\VSS.exe”
Files:
- %Profile%\VSS.exe
- C:\a.txt