Score.exe Removal Instructions

Uncategorized

Yesterday I was testing the Smart Secure Software download, that is known to bundle lots of unwanted programs. After going through the installer a new service appeared on the machine called score.exe. I though the file looked suspicious, since it was unsigned, had no version information, dropped in the c:\Windows folder,  and no entry in the Add/Remove programs dialog.

To my surprise none of the anti-virus programs over at VirusTotal detected the file:

score.exe virustotal report

It will be interesting to see if any of the anti-virus scanners starts to pick up score.exe.

So, should the score.exe file be removed? Yes I think so. You can remove it from FreeFixer by selecting the score.exe process and service:

scores service scores.exe process

Did you also find score.exe on your machine? Any idea how it got there?

Update 2014-10-07: Many of the anti-virus programs are now detecting score.exe:

  • AVG Agent5.HW
  • AVware Trojan.Win32.Generic.pak!cobra
  • Ad-Aware Trojan.Generic.11822832
  • Avast Win32:Dropper-gen [Drp]
  • Baidu-International Trojan.Win32.Agent.BWGA
  • BitDefender Trojan.Generic.11822832
  • Cyren W32/Trojan.KZBC-4044
  • ESET-NOD32 a variant of Win32/Agent.WGA
  • Emsisoft Trojan.Generic.11822832 (B)
  • F-Secure Trojan.Generic.11822832
  • Fortinet W32/Agent.WGA!tr
  • GData Trojan.Generic.11822832
  • Ikarus Trojan.Win32.Agent
  • McAfee Artemis!08675763B644
  • McAfee-GW-Edition Artemis
  • MicroWorld-eScan Trojan.Generic.11822832
  • Qihoo-360 Win32/Trojan.Dropper.c9f
  • Symantec Trojan.Gen.2
  • TheHacker Trojan/Agent.wga
  • TrendMicro TROJ_GEN.R0C1C0EJ514
  • TrendMicro-HouseCall TROJ_GEN.R0C1C0EJ514
  • VIPRE Trojan.Win32.Generic.pak!cobra
  • nProtect Trojan.Generic.11822832