Virus Alert – MSSCRIPT.EXE

Msscript.exe installs with Troj/StartPa-HC and Troj/AdClick-AQ.

Troj/StartPa-HC writes files called msscript.exe, gedit.exe and systemr.exe to your Windows\System or System32 folder. This Trojan can change browser settings and can change your browser's homepage to that of its controlling server.Troj/AdClick-AQ periodically connects to a remote website and displays popup ads. It creates files called msscript.exe, gedit.exe, wups32.exe.

We'd recommend removing these files using WinPatrol. First, kill them under Active Tasks then remove them from your Startup Programs. If running WinPatrol 8.x or later, right click each file then select "Delete file on Reboot".

More information on Troj/StartPa-HC can be found at http://www.sophos.com/virusinfo/analyses/trojstartpahc.html.

More information on Troj/AdClick-AQ can be found at http://www.sophos.com/virusinfo/analyses/trojadclickaq.html.

Virus

Remove