pgroot
2006-06-24, 23:47
Spybot 1.3 2006-06-23 on Windows ME reports Zlob.Downloader
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current\Run\ICSDCLT
whose Data is
C:\WINDOWS\rundll32.exe C:\WINDOWS\SYSTEM\icsdclt.dll,ICSClient
the MD5 is for rundll32.exe
ICSDCLT is for Internet Connection Sharing. See
http://www.tasklist.org/task_rundll32_exeIcsdclt_dll_ICSClient_1379.html
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current\Run\ICSDCLT
whose Data is
C:\WINDOWS\rundll32.exe C:\WINDOWS\SYSTEM\icsdclt.dll,ICSClient
the MD5 is for rundll32.exe
ICSDCLT is for Internet Connection Sharing. See
http://www.tasklist.org/task_rundll32_exeIcsdclt_dll_ICSClient_1379.html