Slayer
03-10-2007, 20:36
evo ga sa nodom 32 pronaso sam ovo i nece se izbrisat lokacija je:
C:/WINDOWS/system32/khfedef.dll
dali bi mi mogao tko reci kako da to izbrisem i stavim dobar file :roll:
na googlu sam pronaso ovo o tome:
1. COVERT ANALYSIS OF: RQRQPPO.DLL
* File Names Used: 29
* Paths Used: 5
* Common File Name: RQRQPPO.DLL
* Common Path: %WINDIR%\SYSTEM32\
* Vendor Information: No Vendor details specified
* RQRQPPO.DLL may use 29 or more path and file names, these are the most common:
* 1 :%honeypotroot%\0657BA6FE510519D0BF588A3729F.....p mw
* 2 :%WINDIR%\SYSTEM32\AWTQOOL.DLL
* 3 :%WINDIR%\SYSTEM32\AWTTQRS.DLL
* 4 :%WINDIR%\SYSTEM32\AWTTTQR.DLL
* 5 :%WINDIR%\SYSTEM32\AWTTUST.DLL
* 6 :%WINDIR%\SYSTEM32\BYXURRS.DLL
* 7 :%WINDIR%\SYSTEM32\BYXUTUS.DLL
* 8 :%WINDIR%\SYSTEM32\DDCBBXW.DLL
* 9 :%WINDIR%\SYSTEM32\EFCBCYV.DLL
* 10:%WINDIR%\SYSTEM32\EFCDDDD.DLL
* 11:%WINDIR%\SYSTEM32\GEBAAWX.DLL
* 12:%WINDIR%\SYSTEM32\GEBAYYV.DLL
* 13:%WINDIR%\SYSTEM32\GEBCDCA.DLL
* 14:%WINDIR%\SYSTEM32\HGGGHHH.DLL
* 15:%WINDIR%\SYSTEM32\KHFEDEF.DLL - EVO OVDJE!!!!!!!!!!
* File Name Structure: Common
* File and Path Structure: Suspicious, unusually high number of file and path combinations
link http://spywaredlls.prevx.com/RRCBCB32020665/RQRQPPO.DLL.html
C:/WINDOWS/system32/khfedef.dll
dali bi mi mogao tko reci kako da to izbrisem i stavim dobar file :roll:
na googlu sam pronaso ovo o tome:
1. COVERT ANALYSIS OF: RQRQPPO.DLL
* File Names Used: 29
* Paths Used: 5
* Common File Name: RQRQPPO.DLL
* Common Path: %WINDIR%\SYSTEM32\
* Vendor Information: No Vendor details specified
* RQRQPPO.DLL may use 29 or more path and file names, these are the most common:
* 1 :%honeypotroot%\0657BA6FE510519D0BF588A3729F.....p mw
* 2 :%WINDIR%\SYSTEM32\AWTQOOL.DLL
* 3 :%WINDIR%\SYSTEM32\AWTTQRS.DLL
* 4 :%WINDIR%\SYSTEM32\AWTTTQR.DLL
* 5 :%WINDIR%\SYSTEM32\AWTTUST.DLL
* 6 :%WINDIR%\SYSTEM32\BYXURRS.DLL
* 7 :%WINDIR%\SYSTEM32\BYXUTUS.DLL
* 8 :%WINDIR%\SYSTEM32\DDCBBXW.DLL
* 9 :%WINDIR%\SYSTEM32\EFCBCYV.DLL
* 10:%WINDIR%\SYSTEM32\EFCDDDD.DLL
* 11:%WINDIR%\SYSTEM32\GEBAAWX.DLL
* 12:%WINDIR%\SYSTEM32\GEBAYYV.DLL
* 13:%WINDIR%\SYSTEM32\GEBCDCA.DLL
* 14:%WINDIR%\SYSTEM32\HGGGHHH.DLL
* 15:%WINDIR%\SYSTEM32\KHFEDEF.DLL - EVO OVDJE!!!!!!!!!!
* File Name Structure: Common
* File and Path Structure: Suspicious, unusually high number of file and path combinations
link http://spywaredlls.prevx.com/RRCBCB32020665/RQRQPPO.DLL.html