Jump to content

Malwarebytes

movcodec20.exe ~130k


1 reply to this topic

#1
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,399 posts
  • Location:Northampton, MA USA
Movie pages :



Codec pages :

http://movcodec.com/
http://gonzo-galleries.net/download.html?id=%5C#


Direct download :

http://movcodec.com/download/movcodec20.exe
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#2
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,399 posts
  • Location:Northampton, MA USA
Fallout :

C:\WINDOWS\ascinstall.exe
C:\WINDOWS\ofbl.ini
C:\WINDOWS\OFLink.dll
C:\WINDOWS\oflink.ini
C:\WINDOWS\OFLink.js
C:\WINDOWS\ofpds.ini
C:\WINDOWS\winthelp.exe

[HKEY_CLASSES_ROOT\CLSID\{A51D8FA4-C859-473D-9E18-FA0C59D16FA3}]
[HKEY_CLASSES_ROOT\Interface\{2284810D-15B5-41A2-9393-FB06709D6712}]
[HKEY_CLASSES_ROOT\OFLink.OFLinker]
[HKEY_CLASSES_ROOT\OFLink.OFLinker.1]
[HKEY_CLASSES_ROOT\TypeLib\{69499CA3-24E2-4D26-88B2-20748823CCB9}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A51D8FA4-C859-473D-9E18-FA0C59D16FA3}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"winthelp"="C:\\WINDOWS\\winthelp.exe"


HJT :

C:\WINDOWS\winthelp.exe
C:\WINDOWS\ascinstall.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://protect.advancedcleaner.com/MjY5Mw==/2/830/ax=0/ed=1/ex=0/ie/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://protect.spyguardpro.com/MTkyNDE=/2/4028/ax=0/ed=1/ex=0/ie/
O2 - BHO: OFLinker Class - {A51D8FA4-C859-473D-9E18-FA0C59D16FA3} - C:\WINDOWS\OFLink.dll
O4 - HKLM\..\Run: [winthelp] C:\WINDOWS\winthelp.exe
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us