Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Get Qt Extensions
  • Unsolved
Collapse
Brand Logo
  1. Home
  2. Qt Development
  3. General and Desktop
  4. mssvc.exe
QtWS25 Last Chance

mssvc.exe

Scheduled Pinned Locked Moved Solved General and Desktop
7 Posts 3 Posters 3.1k Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • K Offline
    K Offline
    Krag
    wrote on last edited by Krag
    #1

    There's an executable called mssvc.exe in AppData\Roaming\Qt\MSSvc
    It starts by itself and uses around 15 % of my CPU. What is it? Should I delete it?

    1 Reply Last reply
    0
    • mrjjM Offline
      mrjjM Offline
      mrjj
      Lifetime Qt Champion
      wrote on last edited by
      #2

      Hi
      its seems a bit suspicious. Checked on 2 win 7 machines and i don't have it.
      And no idea why it would live in qt roaming profile if it belonged to a program you have installed.
      Maybe try to scan with or other malware scanner you prefer.
      https://www.malwarebytes.org/downloads/
      (just select free)

      K 1 Reply Last reply
      1
      • mrjjM mrjj

        Hi
        its seems a bit suspicious. Checked on 2 win 7 machines and i don't have it.
        And no idea why it would live in qt roaming profile if it belonged to a program you have installed.
        Maybe try to scan with or other malware scanner you prefer.
        https://www.malwarebytes.org/downloads/
        (just select free)

        K Offline
        K Offline
        Krag
        wrote on last edited by
        #3

        @mrjj it was a BitCoin miner. I have no idea how that got in there. Does Qt even have a Qt folder in AppData\Roaming or should I remove the the whole folder with all its contents?

        1 Reply Last reply
        0
        • Chris KawaC Offline
          Chris KawaC Offline
          Chris Kawa
          Lifetime Qt Champion
          wrote on last edited by
          #4

          Outside of installation directory Qt usually puts stuff in "QtProject" folders or registry keys. Whatever that thing you have is it's not placed there by Qt.
          The name is suspicious as well, as "mssvc" is a windows service name, but located in the System32 directory, so this thing tries to be sneaky for whatever reason.

          It might be that your computer became someone's botnet zombie and mines bitcoins for him.

          K 1 Reply Last reply
          0
          • Chris KawaC Chris Kawa

            Outside of installation directory Qt usually puts stuff in "QtProject" folders or registry keys. Whatever that thing you have is it's not placed there by Qt.
            The name is suspicious as well, as "mssvc" is a windows service name, but located in the System32 directory, so this thing tries to be sneaky for whatever reason.

            It might be that your computer became someone's botnet zombie and mines bitcoins for him.

            K Offline
            K Offline
            Krag
            wrote on last edited by
            #5

            @Chris-Kawa I deleted the MSSvc folder but there is a legit looking file in the Qt folder. It's called qtaccount.ini
            It contains my email address and some encrypted tokens. Does it belong to Qt?

            1 Reply Last reply
            0
            • Chris KawaC Offline
              Chris KawaC Offline
              Chris Kawa
              Lifetime Qt Champion
              wrote on last edited by
              #6

              Ah, yes, this seems to be a file used by the Qt's MaintenanceTool to store the credentials.
              I guess I was just right about the "usually" part ;)

              K 1 Reply Last reply
              0
              • Chris KawaC Chris Kawa

                Ah, yes, this seems to be a file used by the Qt's MaintenanceTool to store the credentials.
                I guess I was just right about the "usually" part ;)

                K Offline
                K Offline
                Krag
                wrote on last edited by Krag
                #7

                I see. Thanks :)

                1 Reply Last reply
                0

                • Login

                • Login or register to search.
                • First post
                  Last post
                0
                • Categories
                • Recent
                • Tags
                • Popular
                • Users
                • Groups
                • Search
                • Get Qt Extensions
                • Unsolved