Home Forums Windows 7 Security Tips

Windows 7
Windows Vista
Windows XP

Security Tips
Keyboard Shortcuts


Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Hot Downloads

Privacy Policy
Contact Us


Name Msgran.exe


W32.Gramos is a network-aware worm that downloads the Trojan proxy, Backdoor.Ranck.

It does the following:
Downloads the Trojan proxy, Backdoor.Ranck, from a hard-coded URL, copies it to C:\winnt\Mh.exe, and then executes it.
Registers itself as a service process on Windows 95/98/Me systems to hide itself from the task list.
Calculates a random IP address.
Enumerates the users on the remote server and then attempts to connect using these usernames with a blank password.
Copies itself to \\\c$\winnt\system32\Msgran.exe.
Remotely schedules a task to run the worm on the newly infected computer.

To remove it from autorun section, navigate to the key:
and delete the value:
"Messenger start-up"="Msgran.exe"

Use antivirus (also check How To Remove section)Startup Optimizer to automatically remove it.

Still have a problem? Ask for help at our discussion forum.

Search Dangerous Files :

: : Recent posts at Forums : :

Proposal servant moved

movie picssearch sex

My supplementary website

Renewed spot

Mod Project

Adult galleries -ИжевскГ

Fresh domestic bellhop after project

Latest install

My self-controlled project

Pictures from social networks

проститутки и

Public pictures

Mod Job

Full-grown galleries

New Job

My supplementary website

зоофилы видео

Mature galleries

Experimental Poke out

купить огнест

Social pictures

Social pictures

Sexual pictures

Pictures from social networks

My brand-new website

Gay blogging repair, Everyday photos

где купить на&

Free grown-up galleries

Mod Poke out

SoftwareTipsandTricks, All Rights Reserved.