Remove Drorar. Description and removal instructions

Title: Drorar
Type: Trojans	Severity scale: (63 / 100)

Drorar is a trojan that records user keystrokes and steals system information. It silently transfers gathered data to predetermined remote servers. Drorar registers itself as a system service called MSDCSRV32 and automatically runs on every Windows startup.

FORUM:
Discuss Drorar in
spyware removal forum

Drorar properties:
• Logs keystrokes
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Drorar removal:

remover for Drorar

Drorar manual removal:

Kill processes:
mssrv.exe, svchost.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\fcmail_tcpipdog\PathName=%Windir%\winsock_32a.dll

HELP:
how to remove registry entries

Delete files:
mssrv.exe, svchost.exe, sclureg32a.dll, winsock_32a.dll, setup32set.ini

HELP:
how to remove harmful files

Misc:
Exact file location:
mssrv.exe - C:\Program Files\Common Files\System\ado
svchost.exe - C:\Program Files\Common Files\System
sclureg32a.dll, winsock_32a.dll, setup32set.ini - C:\Windows or C:\Winnt

Other programs to remove Drorar:

• SUPERAntiSpyware - Review - Download
• CounterSpy - Review - Download
• Windows Defender - Review - Download

Information added: 13/09/05
Information updated: 13/09/05

Additional resources related to Drorar:

Attention: If you know or you have a website or page about Drorar removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Drorar parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.