mssql.exe Virus/Spyware ? - Overclock.net

Benny99 · 09-01-08

Hey Guys

Had this random thing starting up in my Msconfig mssql.exe ?

Not sure what it is but i did disable it in Msconfig..

Any ideas how to get rid of it fully.

Thanks

Ben

Dawlish7 · 09-01-08

do you use my sql?

Benny99 · 09-01-08

Quote:

Originally Posted by Dawlish7

do you use my sql?

No what is that ?

**t4ct1c47** · 09-01-08

For future reference you can easily use Google to search for information on processes. This is just my advice that it's good to practice research skills yourself before asking for help.

I searched for "mssql.exe" and after reading the results it appears that mssql.exe is likely a trojan virus. I recommend you get rid of it, try the usual Adaware and SpyBot programs first. Be sure to run the scanners in Windows safe mode.

Benny99 · 09-01-08

Quote:

Originally Posted by t4ct1c47

For future reference you can easily use Google to search for inforamtion on processes.

I searched for "mssql.exe" and after reading the results it appears that mssql.exe is likely a trojan virus. I recommend you get rid of it.

Yea i already googled it

Thing is i disabled it in Msconfig so it wont startup again however im currently running Avast to see if it finds anything.

It says the file is in HKCU/Software/Microsoft/Windows/CurrentVersion/Run

**t4ct1c47** · 09-01-08

Mssql.exe is a Trojan Backdoor.Sdbot.
Mssql.exe spreads via Internet Relay Chat (IRC).
Mssql.exe tries to terminate antiviral programs installed on a user computer.
Mssql.exe monitors user Internet activity and private information.
It sends stolen data to a hacker site.
Related files:
%System%\Cnfgldr.exe
%System%\cthelp.exe
%System%\Sysmon16.exe
%System%\Sys3f2.exe
%System%\Syscfg32.exe
%System%\Mssql.exe
%System%\Aim95.exe
%System%\Svchosts.exe
%System%\FB_PNU.EXE
%System%\Cmd32.exe
%System%\Sys32.exe
%System%\Explorer.exe
%System%\IEXPL0RE.EXE
%System%\iexplore.exe
%System%\sock32.exe
%System%\MSTasks.exe
%System%\service.exe
%System%\antivirus (also check How To Remove section)exe
%System%\ipcl32.exe
%System%\syswin32.exe
%System%\CMagesta.exe
%System%\YahooMsgr.exe
%System%\vcvw.exe
%System%\spooler.exe
%System%\MSsrvs32.exe
%System%\svhost.exe
%System%\winupdate32.exe
%System%\quicktimeprom.exe
More info: http://securityresponse.symantec.com/avc...
Removal:
Kill Mssql.exe process and remove Mssql.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.