Home Spyware Database "Remove Mosucker"

Mosucker  

Mosucker Description

This RAT is presented as a tool that is supposed to help net administrators to control PCs remotely. But a quick inspection of the vendor description leaves no doubt that this RAT tool can be used for illegal actions. It affects such operating computers as Windows 95/98/XP/ME/WinNT/2000. The pest was created by a German hacker called Krusty from a group called Inferno Industries. The pest is written in Visual Basic 6 and compressed with ASPack. Many versions appeared from December 1999 to March 2004. The infection peaked in such countries as Australia, France and the United States. Some versions also have the ability to disable Firewall protection on the infected PC.

How can I get rid of Mosucker?

The most common spyware removal tactic is to uninstall Mosucker by using the "Add/Remove Programs" utility. However, as there may still be hidden Mosucker files, it's possible that Mosucker will reappear after reboot. Follow the Mosucker detection and removal methods below.

Mosucker Automatic Detection (Recommended)

Is your PC infected with Mosucker? To safely & quickly detect Mosucker, we highly recommend you...

Download SpyHunter's FREE Mosucker Scanner.

SpyHunter's free version is only for spyware detection. If SpyHunter's spyware scanner detects Mosucker on your PC, you have the option of purchasing SpyHunter's spyware removal tool to remove Mosucker and other spyware threats.

Mosucker Manual Removal Instructions

Below is a list of Mosucker manual removal instructions and Mosucker components listed to help you remove SpyCrush from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter's spyware detection tool to check for Mosucker.

Step 1 : Use Windows File Search Tool to Find Mosucker Path

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "Mosucker" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes your search, hover over the "In Folder" of "Mosucker", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete Mosucker in the following manual removal steps.
Read more about How to Find Mosucker with File Search Tool

Step 2 : Use Windows Task Manager to Remove Mosucker Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "Mosucker" process by name.
3. Select the "Mosucker" process and click on the "End Process" button to kill it.
4. Remove the "Mosucker" processes files:
5. v young.exe vvuijoe.exe unin0686.exe pkg3392.exe pkg332.exe pkg310.exe svr.exe msnetcfg.exe jthh.exe skinmaker.exe server5.exe server4.exe server3.exe server2.exe server1.exe server.exe pics.zip.exe mosucker.exe mosucker 2.0.exe free pink.exe editserver.exe editserver 2.0.exe createserver.exe backdoor.mosucker.11.exe, createserver.exe, editserver 2.0.exe, editserver.exe, free pink.exe, mosucker 2.0.exe, mosucker.exe, pics.zip.exe, server.exe, server1.exe, server2.exe, server3.exe, server4.exe, server5.exe, skinmaker.exe, [system root]\jthh.exe, [system root]\msnetcfg.exe, [system root]\system\svr.exe, [system root]\temp\pkg310.exe, [system root]\temp\pkg332.exe, [system root]\temp\pkg3392.exe, [system root]\unin0686.exe, [system root]\vvuijoe.exe, v young.exebackdoor.mosucker.11.exe
   Read more about How to kill Mosucker Processes

Step 3 : Use Registry Editor to Remove Mosucker Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "Mosucker" value, right-click on it and select the "Delete" option.
4. Locate and delete "Mosucker" registry entries:
5. HKEY_LOCAL_MACHINE softwaremicrosoftactive setupinstalled components{beuicvq-zpdev-zyk-oswoz-ipcjbgekjhf} HKEY_LOCAL_MACHINE softwaremicrosoftactive setupinstalled components{eengqgs-gdrfc-zzvzd-thmp-dnvpuihfkre} HKEY_LOCAL_MACHINE softwaremicrosoftactive setupinstalled components{hmcsqss-ejo-sdbyh-rcwb-ypenjkwjze} HKEY_LOCAL_MACHINE softwaremicrosoftactive setupinstalled components{mbubrwf-krfhc-cpg-qygw-lrjscpnsur} HKEY_LOCAL_MACHINE softwaremicrosoftactive setupinstalled components{rtemrsp-vhe-kgsoz-enjdg-tdtfhwtknffn} rtemrsp-vhe-kgsoz-enjdg-tdtfhwtknffn
   Read more about How to Remove Mosucker Registry Entries

Step 4 : Use Windows Command Prompt to Unregister Mosucker DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the Mosucker DLL file is located and press the "Enter" button on your keyboard. If you don't know where Mosucker DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "Mosucker" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u Mosucker.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "Mosucker" DLL files:
5. buxyelbk.dll moicons.dll
   Read more about How to Remove Mosucker DLL Files

Step 5 : Detect and Delete Other Mosucker Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "Mosucker" process and click on the "End Process" button to kill it.
8. Remove the "Mosucker" processes files:
9. webdl.ocx thumbs.db tapisvc.sys.txt xqwrmthm.sys winexec32.dli wesapygp.sys qirqgs.bin kernel32.txp{10} superclicks.msp superclicks.gui superclicksreadme.txt skin.ini setup.ins setup.ini runtimes.txt readme.txt put.cgi pictures[1].txt picture26.jpg newfeatures.txt newdefault.title.gif msnmsgv2.msp msnmessage.gui msnmessagev2.gui msnmessagev2readme.txt msnmassmessagereadme.txt mosucker.ini mosucker.chm infector.msp infector.gui infectorreadme.txt htm.cgi help+tutorial.chm help.chm get.cgi fuckme!!!!!.vbs front.jpg fakelogin.msp fakelogin.gui fakeloginreadme.txt data.tag build.stub bios_killer_plugin.msp bioskillerpluginv1.0.gui bioskillerpluginreadme.txt avkill_small.ini avkill_large.ini 3.stub 1.stub2.stub buxyelbk.dll moicons.dll v young.exe vvuijoe.exe unin0686.exe pkg3392.exe pkg332.exe pkg310.exe svr.exe msnetcfg.exe jthh.exe skinmaker.exe server5.exe server4.exe server3.exe server2.exe server1.exe server.exe pics.zip.exe mosucker.exe mosucker 2.0.exe free pink.exe editserver.exe editserver 2.0.exe createserver.exe 1.stub 2.stub, 3.stub, avkill_large.ini, avkill_small.ini, backdoor.mosucker.11.exe, bios killer plugin readme.txt, bios killer plugin v1.0.gui, bios_killer_plugin.msp, build.stub, createserver.exe, data.tag, editserver 2.0.exe, editserver.exe, fake login readme.txt, fake login.gui, fakelogin.msp, free pink.exe, front.jpg, fuck me!!!!!.vbs, get.cgi, help.chm, help+tutorial.chm, htm.cgi, infector readme.txt, infector.gui, infector.msp, moicons.dll, mosucker 2.0.exe, mosucker.chm, mosucker.exe, mosucker.ini, msn mass message readme.txt, msn message v2 readme.txt, msn message v2.gui, msn message.gui, msnmsgv2.msp, new default.title.gif, newfeatures.txt, pics.zip.exe, picture 26.jpg, pictures[1].txt, put.cgi, read me.txt, readme.txt, runtimes.txt, server.exe, server1.exe, server2.exe, server3.exe, server4.exe, server5.exe, setup.ini, setup.ins, skin.ini, skinmaker.exe, superclicks readme.txt, superclicks.gui, superclicks.msp, [system root]\buxyelbk.dll, [system root]\jthh.exe, [system root]\kernel32.txp{10}, [system root]\msnetcfg.exe, [system root]\qirqgs.bin, [system root]\system\svr.exe, [system root]\temp\pkg310.exe, [system root]\temp\pkg332.exe, [system root]\temp\pkg3392.exe, [system root]\unin0686.exe, [system root]\vvuijoe.exe, [system root]\wesapygp.sys, [system root]\winexec32.dli, [system root]\xqwrmthm.sys, tapisvc.sys.txt, thumbs.db, v young.exe, webdl.ocxbackdoor.mosucker.11.exe
   Read more about How to Delete Harmful Files

Mosucker Recommendation

RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good spyware cleaner/remover to track Mosucker and automatically remove Mosucker as well as other spyware, adware, trojans, and virus threats in your PC.

If you believe you have Mosucker installed on your computer, check for Mosucker with SpyHunter's Free Spyware Scanner.

Download SpyHunter's FREE Mosucker Scanner.

SpyHunter's free version is only for spyware detection. To remove Mosucker and other spyware threats you can purchase SpyHunter's spyware removal tool. Since new Mosucker files are constantly being released, it is normally advised to run SpyHunter's scanner weekly to get the latest updates on Mosucker and other spyware threats.

To learn more on Mosucker, see our Mosucker resource section below.

---

More Mosucker Resources

What is Remote Administration Tools?

Mosucker is a type of Remote Administration Tools.

Remote administration tools are mostly used by network administrators to control your PC remotely. The main purpose this spyware is to control and fix your computer and settings without having to physically be in the same location. However, sometimes remote administration tools are used for illegal purposes, such as unauthorized remote control that may allow access to your personal and financial files and information.

Think you have Mosucker? Run SpyHunter's FREE Mosucker scan and automatically detect Mosucker on your PC.

Back to Top

Mosucker Prevention Rules

Protect your computer from Mosucker and other spyware by following these four easy prevention rules.

Rule #1: Keep your Windows Security up-to-date

Microsoft provides updates weekly and can always be downloaded manually from the Microsoft website.
Tip: Regularly visit Windows Update and set your computer to receive security & critical updates automatically.

To get Microsoft Update, go to IE > Tools > Windows Update > Product Updates, and select "ALL High-Priority Security Updates" from the list.

Then open IE and go to Internet Options > Security > Internet, then press "Default Level", then OK. Now press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software

A good anti-spyware software that recognizes current Mosucker spyware as well as other forms of spyware can can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect Mosucker automatically.

Download SpyHunter's Free Mosucker Scanner

SpyHunter's free version is only for spyware detection. To remove Mosucker and other spyware threats, you can purchase SpyHunter's spyware removal tool.

Rule #3: Install and keep your firewall turned on

A firewall is essential for a complete protection of your PC. Make sure that your firewall is always turned on. A firewall can prevent unwanted software like Mosucker from infecting your computer.

Rule #4: Keep your anti-spyware definitions up-to-date

Since new Mosucker files can be created every day, it is important to keep your anti-spyware program up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button you can get new spyware definitions instantly. Often, an anti-spyware software will open an update window reminding you that there are new updates available.

Back to Top

User Comments

There are no comments posted for this page.

Leave a Reply

Name (required)

Mail (will not be published) (required)

Anti-spam word: (Required)*
To prove you're a person (not a spam script), type the security word shown in the picture.

Back to Top