Search:

Type: Posts; User: AlexLehm; Keyword(s):

Search: Search took 0.01 seconds.

  1. Replies
    7
    Views
    11,246

    thats not quite the same thing, the program...

    thats not quite the same thing, the program doesn't change the wallpaper but displays something in the system tray.

    I also checked for the registry keys mentioned on the page, but it doesn't...
  2. Replies
    7
    Views
    11,246

    ok, I did some more tests and I think I found...

    ok, I did some more tests and I think I found some programs in \windows\system32, see below

    When I sniffed the outgoing connection I found that the winlogon connects to the domain ware2006.com and...
  3. Replies
    7
    Views
    11,246

    I'm pretty sure the actual program is not stored...

    I'm pretty sure the actual program is not stored in this directory, the program just downloads one file to the dir and tries to start it.

    I will post the result tomorrow
  4. Replies
    7
    Views
    11,246

    actual winlogon.exe is connecting to http

    Hi,

    I recently removed a spyware infestation from a PC of a colleague of mine which mainly consisted of some CoolWWW components and a program trying to appear as a security center application that...
  5. Replies
    1
    Views
    3,273

    actual winlogon.exe is connection to http

    Hi,

    I recently removed a spyware infestation from a PC of a colleague of mine which mainly consisted of some CoolWWW components and a program trying to appear as a security center application that...
Results 1 to 5 of 5