Today we found a new trojan called SafeMass.exe on our office pc. Most of the recent updated antivirus can't detect or remove it from PC. So that we have to remove it manually.
At the very first, close it from your system tray then remove its autorun entry from registry. Here is the registry key location-
\REGISTRY
\MACHINE
\SOFTWARE
\Microsoft
\Windows
\CurrentVersion
\Run
\SafeMass
And then Remove SafeMass.exe from your system
This trojan also create a autorun.inf file with following contents
[autorun]
open=SafeMass.exe
shellexecute=SafeMass.exe
shell\auto=&Auto
shell\auto\command=SafeMass.exe
shell\explore=&Explore
shell\explore\command=SafeMass.exe
shell\find=S&earch...
shell\find\command=SafeMass.exe
shell\open=&Open
shell\open\command=SafeMass.exe
Remove it too..
Thats it.