Jump to content


Photo

codec_setup.exe ~46k


  • Please log in to reply
2 replies to this topic

#1 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,402 posts
  • Location:Northampton, MA USA

Posted 17 November 2007 - 10:16 PM

Found by Fatdcuk , thanks . :angry:

Movie Pages :

http://newvideogalleries.com/hosted/3735/8kBWwlHi1C/


Direct downloads :

http://88.208.19.147/get/download/codec_setup.exe
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#2 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,402 posts
  • Location:Northampton, MA USA

Posted 18 November 2007 - 08:51 AM

Fallout :

C:\Program Files\*RANDOM*\*RANDOM*.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"*RANDOM*"="rundll32.exe \"C:\\Program Files\\*RANDOM*\\*RANDOM*.dll\",Init"


HJT :

O4 - HKLM\..\Run: [*RANDOM*] rundll32.exe "C:\Program Files\*RANDOM*\*RANDOM*.dll",Init


Now for the good news , the dll has a static MD5 for a period of about 24 hours at a time .

MD5 : FB0865B1E6635ED5E864EFE74FD397E0
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3 nosirrah

nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,402 posts
  • Location:Northampton, MA USA

Posted 23 November 2007 - 09:33 AM

Fallout :

C:\Program Files\*RANDOM*\*RANDOM*.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"*RANDOM*"="rundll32.exe \"C:\\Program Files\\*RANDOM*\\*RANDOM*.dll\",Init"


HJT :

O4 - HKLM\..\Run: [*RANDOM*] rundll32.exe "C:\Program Files\*RANDOM*\*RANDOM*.dll",Init

MD5 : 61D37AC92C195182AB5E57D9D0E5D217
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users