un tip de mallware

[rukov]

Acum 2 zile am gasit balaria asta ca rula la mine in pc.Am incercat sa ii dau kill la proces si fericire blue screen folderu si fisierele erau ascunse.

Folositi cu grija fisierele sunt infectate

New folder (2).zip — RGhost — file sharing

[Maximus]

"If ProcessExists("avastui.exe") Then Sleep(20000)"

If $fake = "fake3" Then

If $delay = "3168468" Then

If $mutex = "mutex3" Then

If $startup = "3526264" Then

If $antis = "antis3" Then

If $botkiller = "botkiller3" Then

If $downloader = "downloader3" Then

If $uac = "uac3" Then

If $systemrestore = "systemrestore3" Then

If $antitask = "antitask3" Then

If UBound(ProcessList($scriptname)) > 2 Then Exit

If NOT ($read_antitask = "1") Then

If NOT ($read_uac = "0") Then

If $buac = 0 Then

If NOT FileExists($unicode_userprofile & "\" & $path & "\17472.vbs") Then

If FileExists($unicode_startup & "\start.lnk") Then

If @ERROR Then Return

.. si lista continua

pare a fi AutoIT, cred ca adevaratul cod se compileaza la primul RUN in functie de ce gaseste in PC (tip antivirusi/etc)