Tuesday, January 24, 2006

New SpywareStrike Variant? [CONFIRMED]

New file found and registry point:


[HKEY_USERS\S-1-5-21-2581581100-4246374879-3904722870-1007\Software\Classes\CLSID\{D81E2FC4-B0A2-11D3-21AC-07C04C21A18A}\InProcServer32]

@="C:\\WINDOWS\\system32\\replmap.dll<<<--new file

"ThreadingModel"="Apartment"

Stay tuned.

UPDATE:Noahadfear SmithRem tool updated to remove latest variant!!!

Posted by at

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)