The file WMSDKNS.DTD.EXE is identified as a virus dropper.
The dropper WMSDKNS.DTD.EXE is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
The file WMSDKNS.DTD.EXE loads into the computer memory and tries to connect to the dangerous web site.
Usually the WMSDKNS.DTD.EXE dropper does not infect the files on the computer and does not replicate itself on other computers.
Kill the WMSDKNS.DTD.EXE process and delete the file WMSDKNS.DTD.EXE.
Malware Analysis of WMSDKNS.DTD.EXE
Full path on a computer: %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\DEFAULT USER\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS MEDIA\9.0\WMSDKNS.DTD.EXE
Detected by UnHackMe:
WMSDKNS.DTD.EXE
Default location: %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\DEFAULT USER\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS MEDIA\9.0\WMSDKNS.DTD.EXE
Removal Results: Success
Number of reboot: 1
WMSDKNS.DTD.EXE is known as:
Trojan.Muldrop3
How to quickly detect WMSDKNS.DTD.EXE presence?
![]( "Files")
Files:
Files:- %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\LOCALSERVICE.EXE
- %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT.LOG.EXE
- %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT.EXE
- %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\DEFAULT USER\TEMPLATES\WORDPFCT.WPD.EXE
- %SYSTEMDRIVE%\DOCUMENTS AND SETTINGS\DEFAULT USER\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS MEDIA\9.0\WMSDKNS.DTD.EXE