Is the file TSMADESCRIPT.VBS located on your computer? Then your computer is infected.
We do suggest you should remove TSMADESCRIPT.VBS from your computer as soon as possible.
TSMADESCRIPT.VBS is Trojan/Backdoor.
Kill the process TSMADESCRIPT.VBS and remove TSMADESCRIPT.VBS from the Windows startup.
Malware Analysis of TSMADESCRIPT.VBS
Full path on a computer: %SysDir%\tsmadescript.vbs
Removal Results: Success
Number of reboot: 1
TSMADESCRIPT.VBS is known as:
Trojan.DwnLdr-JJR
TSMADESCRIPT.VBS hash:
- MD5: 9dd76c97581a36d5f62be28957fce1b7
How to quickly detect TSMADESCRIPT.VBS presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ATI32: “C:\windows\system32\svchosrt64.exe”
Files:- %SysDir%\SrUac64.bat
- %SysDir%\tsmadescript.vbs
- C:\windows\system32\svchosrt64.exe