|
Hmm no trojan huh or virus huh.
Funny that it tries to continually make a file called stfA7.tmp constantly and write various binaries into windows/system32.
Trying to hide behind UPX is an amateur move :P
Here is a list of its favourite other binaries it makes
prunnet.exe
gadcom.exe
oh and
winvsnet.tmp
Last edited by DABhand; 25-11-2008 at 12:25.
|