Security Stronghold security made easy

Remove Mosucker - Remote Access Trojan (RAT)

Remote Access Trojan or RAT for short is form of trojan horse that is often called backdoor because it provides the intruder, or remote user (hacker) special access (hole) to your PC from some control features to full control. Mosucker is classified as RAT because of it affect to infected system. Mosucker is considered to be very dangerous as it uses special technic to hide its activity from user and antivirus applications. Usually firewalls can detect its activity as Mosucker regularly tries to access internet to grant an access to its owner.

Description of Mosucker and certain parameters of the threat.

Their server parts must be setup to the affected platform as any other applications with or without user information content. Nevertheless, legitimate Mosuckers have practically the same functionality as parasitical softwares and therefore can be used for obvious malicious purposes. Mosucker tracks screencaptures of buyer work and delivers them to the perpetrator. Widely spread malicious Mosuckers interact mostly machines running Windows operating system. Mosucker is an infamous ill-intentioned RAT that allows the violator to do with a compromised machine everything he covets and even more. The pest can wipe out all information from hard disks, manage files, record user keystrokes, restart or turn off a PC, take screencaptures, represent messages and vary critical platform settings.

Threat indicator: HIGH

Threat data table:

Name of the threat:

Command or file name:

Threat type:

Affected OS:

Mosucker

services.exe

Rat

Win32 (Windows 9x, Windows XP, Windows Vista, Windows Seven)


 

Become our customer and our software or support staff will remove Mosucker from your PC and fix problems that Mosucker created!

You can purchase any of our antivirus products or Mosucker Removal Tool and perform a scan. In case it doesn't find a problem you can request FREE Mosucker removal service in the form below or in support section. We will contact you in several minutes (as we have a lot of requests it can take up to couple of hours) and provide specific removal solution of Mosucker. Submit you request below.

Click to ask professional of Mosucker solution

Submit detailed description of your problem below:

We'll reply you in 10 minutes or less
* Name:
* E-mail:
* Problem summary:
* Detailed description:
Attach suspicious file:
Here you can attach file you suspect to be virus or source of problem. If you want to attach several files, put them into one archive and attach it instead.

We will contact you back in less an hour after you click on this button.

Particular solution for your exact problem guaranteed!

It is important:

  1. We hate spam as much as you do. We will not share your email with any third party or publish it anywhere. Your email is used only to contact you and give you Mosucker removal solution.
  2. All fields of this form are obligatory.


Download Wipersoft Antispyware

Download this advanced removal tool and solve problems with Mosucker and services.exe (download of fix will start immediately):

Download WiperSoft Antispyware to remove Mosucker

* WiperSoft Antispyware was developed to remove threats like Mosucker in automatic mode. Remover has active module to protect PC from hijackers, trojans, ransomware and other viruses. Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

Features of WiperSoft Antispyware

* Removes all files created by viruses.

* Removes all registry entries created by viruses.

* You can activate System and Network Guards and forget about malware.

* Can fix browser problems and protect browser settings.

* Removal is guaranteed - if Wipersoft fails ask for FREE support.

* 24/7 Spyware Helpdesk Support included into the package.


Download Spyhunter Remediation Tool by Enigma Software

Download AntiMalware to remove Mosucker

Features of Spyhunter Remediation Tool

* Removes all files created by Mosucker.

* Removes all registry entries created by Mosucker.

* Fixes browser redirection and hijack if needed.

* "Toolbar Remover" tool will help you get rid of unwanted browser extensions.

* Removal is guaranteed - if Spyhunter Remediation Tool fails ask for FREE support.

* 24/7 Helpdesk Support and 5 hours of Remote Support via GoToAssist included into the package.

Software Industry Professionals Member
Threat's description and solution are developed by Security Stronghold security team.

You can try two other options: remove Mosucker manually or using proffesional support of our specialist:

* Removing Mosucker manually.

* Professional support in fixing all problems with Mosucker from our Security Support Team.


Mosucker - ways of infecting

Mosucker can infect your PC from different sources. It can infiltrate computer through peer-to-peer applications, adult sites and also it can come bundled with adware or spyware. Then it copies its file(s) to your hard disk. Its typical file name is services.exe. Then it creates new startup key with name Mosucker and value services.exe and will then load on every boot up. You can also locate it in your processes list with name services.exe or Mosucker.

Please take 1 second to show that you like our solution - click on this Facebook button:

Manual guide for Mosucker removal?

Mosucker can be manually removed by locating and deleting all registry keys and files connected with Mosucker and, of course, removing process from running on startup as well.

1. Remove the following processes:

  • 1.stu
  • 2.stu
  • 3.stu
  • avkill_large.ini
  • avkill_small.ini
  • backdoor.mosucker.11.exe
  • bios killer plugin readme.txt
  • bios killer plugin v1.0.gui
  • bios_killer_plugin.msp
  • build.stu
  • createserver.exe
  • data.tag
  • editserver 2.0.exe
  • fake login readme.txt
  • fake login.gui
  • fakelogin.msp
  • free pink.exe
  • front.jpg
  • fuck me!!!!!.vbs
  • get.cgi
  • help+tutorial.chm
  • htm.cgi
  • infector readme.txt
  • infector.gui
  • infector.msp
  • moicons.dll
  • mosucker 2.0.exe
  • mosucker.chm
  • mosucker.exe
  • mosucker.ini
  • msn mass message readme.txt
  • msn message v2 readme.txt
  • msn message v2.gui
  • msn message.gui
  • msnmsgv2.msp
  • new default.title.gif
  • newfeatures.txt
  • pics.zip.exe
  • picture 26.jpg
  • pictures[1].txt
  • put.cgi
  • runtimes.txt
  • server1.exe
  • server2.exe
  • server3.exe
  • server4.exe
  • server5.exe
  • setup.ini
  • setup.ins
  • skin.ini
  • skinmaker.exe
  • superclicks readme.txt
  • superclicks.gui
  • superclicks.msp
  • tapisvc.sys.txt
  • v young.exe
  • w32mosuck20.vex
  • w32mosuck21.vex
  • w32mos~1.exe
  • w32mos~2.exe
  • webdl.ocx
  • buxyelbk.dll
  • jthh.exe
  • msnetcfg.exe
  • qirqgs.bin
  • unin0686.exe
  • vvuijoe.exe
  • wesapygp.sys
  • winexec32.dli
  • xqwrmthm.sys
  • svr.exe
  • pkg310.exe
  • pkg332.exe
  • pkg3392.exe
  • runtimes.exe
  • kernel32.txp{10}
  • 8.temp
  • 1.temp
  • 7.temp
  • 2.temp
  • rg.temp
  • xdugx.temp

Warning: you should delete only those files with the names exactly the same as in the list and located in folders listed below. There may be legitimate system files with the same or near the same names. We recommend you to use FREE WiperSoft Antispyware Malware Remediation Tool for guaranteed threat removal.

**Trial version of Wipersoft provides detection of computer viruses for FREE. To remove malware, you have to purchase the full version of Wipersoft.

2. Following folders created by Mosucker also need to be removed:

  • %desktop%\mosucker 3.0b\runtimes\
  • %desktop%\mosucker 3.0b\stub\

3. Using registry editor find and remove this registry entries:

  • Key: software\microsoft\windows\currentversion\run\motalases
    Value: @
  • Key:
    software\microsoft\active setup\installed components\{eengqgs-gdrfc-zzvzd-thmp-dnvpuihfkre}
  • Key:
    software\microsoft\active setup\installed components\{hmcsqss-ejo-sdbyh-rcwb-ypenjkwjze}
  • Key:
    software\microsoft\active setup\installed components\{mbubrwf-krfhc-cpg-qygw-lrjscpnsur}
  • Key:
    software\microsoft\active setup\installed components\{rtemrsp-vhe-kgsoz-enjdg-tdtfhwtknffn}
  • Key: software\microsoft\windows\currentversion\run\service
    Value: @
  • Key:
    software\microsoft\active setup\installed components\{beuicvq-zpdev-zyk-oswoz-ipcjbgekjhf}
  • Key: Download.Downloader
  • Key: Download.Downloader\Clsid
  • Key: Interface\{91909A9C-2E1D-11D5-90B0-50D46AC101A1}
  • Key: Interface\{91909A9C-2E1D-11D5-90B0-50D46AC101A1}\ProxyStubClsid
  • Key: Interface\{91909A9C-2E1D-11D5-90B0-50D46AC101A1}\ProxyStubClsid32
  • Key: Interface\{91909A9E-2E1D-11D5-90B0-50D46AC101A1}
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: CGILocation
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: Version
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: _AgreementAccepted
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: NickName
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: Current skin
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: Skin file
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmFiles.Width
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmFiles.Height
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtDrive.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtFile.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtIP.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtport.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtPrint.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtTitle.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.txtText.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmouse.txtSetMouseX.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmouse.txtSetMouseY.Text
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.listFontsize.ListIndex
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.listButtons.ListIndex
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.listSymbol.ListIndex
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: frmmain.checkInputbox.Value
  • Key: Software\VB and VBA Program Settings\MoSucker\Settings
    Value: URL

 

« Back to catalog

Home | Partners | Shop | Support | Terms of use | Contact Us | Privacy Policy | Sitemap

Copyright © 2024 Security Stronghold. All Rights Reserved. All content on this website is protected and belongs to Security Stronghold LLC.