Home Malware Programs Malware MSA Security Center

MSA Security Center

Posted: October 21, 2008

MSA Security Center is a malware usually installed in your computer system by a trojan or virus. MSA Security Center is known to generate an enormous amount of fake popup messages stating that your computer is infected by trojans and that you're at a high risk of being infected. MSA Security Center's pop-ups may also urge you to buy MSA Security Center's full version to get rid of viruses and trojans.

Moreover, MSA Security Center may also come bundled with additional rogue anti-spyware programs. MSA Security Center may cause computer's performance and internet speed to slow down. MSA Security Center may put your privacy and information at risk.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Windir%\iebho.dll
    2 %Windir%\sysutils\settings.ini
    3 %Windir%\sysutils\sounds\01.wav
    4 %Windir%\sysutils\sounds\02.wav
    5 %Windir%\sysutils\sounds\03.wav
    6 %Windir%\sysutils\sysutil.exe
    7 %Windir%\sysutils\sysutil_s.exe
    8 %Windir%\sysutils\uninstall.exe
    9 %Windir%\sysutils\warning\alertpage.jpg
    10 %Windir%\sysutils\warning\spacer.gif
    11 %Windir%\sysutils\warning\warningpage.html
    12 %Windir%\sysutils\winsystip.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run MSASecurityCenterHKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{f3642b57-3ea8-4eea-a643-9de138381a57}HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOT\clsid\{f3642b57-3ea8-4eea-a643-9de138381a57}HKEY_CLASSES_ROOT\clsid\{f3642b57-3ea8-4eea-a643-9de138381a57}\inprocserver32HKEY_CLASSES_ROOT\clsid\{f3642b57-3ea8-4eea-a643-9de138381a57}\inprocserver32 threadingmodel
Loading...