Najib’Palace

Personal weblog with news of software, hardware, technology, tips and tricks

rklhmorx.exe

Haik….lagi lagi virus autorun ditemui :D misi mencari virus semakin hangat nampaknya :D

suspek primary virus: rklhmorx.exe

menggunakan autorun.inf untuk menyebarkan diri sendiri.

info autorun.inf

[autorun]
systemID=rklhmorx.exe
open=rklhmorx.exe
shellopen=??(&O)
shellopenCommand=rklhmorx.exe
shellopenDefault=1
shellexplore=?????(&X)
shellexploreCommand=rklhmorx.exe

fail utama virus:
rklhmorx.exe
msvcr71.dll

Kaspersky mengenali virus ini dengan nama

virus Worm.Win32.AutoIt.c    File: E:penjara-virus$folder-name//PE_Patch.UPX//UPX//script.au3
sekian terima kasih :D

March 2, 2008 Posted by ariyako | Virus-Tech | | No Comments Yet