|
Donation/Premium |
|
 |
|
|
|
|
|
|
|
|
|
| View previous topic :: View next topic |
| Author |
Message |
PB-tries
Cadet
Joined: Nov 04, 2004
Posts: 3
Location: Canada
|
 Posted: Thu Nov 04, 2004 3:54 pm Post subject: Tnat -> weca.exe |
|
|
I found this command added yesterday.
Name = "Tnat", Command = "C:\Windows\Profiles\...\Application Data\weca.exe"
Appears in only one profile. Never saw it before.
Have searched Yahoo, Google and checked the startup list here...no info
Windows 98
System is scanned daily by AVG 6.0.788 (updated frequently)
Frequently find Trojans and Downloaders, picked up from browsing I guess.
Changed cable modems last week per instruction from Rogers (upgrade), but the date on the above file is yesterday's.
Anyone have any idea what this is? 
|
|
| Back to top |
|
 |
TonyKlein
Site Moderator
Microsoft MVP
Joined: Oct 15, 2002
Posts: 13120
Location: Netherlands
|
| Posted: Fri Nov 05, 2004 3:01 pm Post subject: |
|
|
Hi,
This is a ClickSpring/PurityScan adware variant, which is increasingly using random file names, reason why we're not listing those.
_________________
Tony  CLSID List
|
|
| Back to top |
|
|
|
|
|
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum
|
Powered by phpBB © 2001 phpBB Group
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
