Categories:
Administration (10)
Adware Spyware (7)
Apache (10)
Bluetooth (125)
DOS Commands (1)
Edge (28)
General (2)
Internet Explorer (217)
Media Center (12)
Media Player (11)
Mozilla Firefox (18)
PHP (15)
Programming (8)
Security (4)
Silverlight (15)
Tips (17)
Tools (218)
Tutorials (5)
Windows 10 (166)
Windows 7 (636)
Windows 8 (1091)
Windows Phone (33)
Windows Server 2008 (165)
Windows Server 2012 (84)
Windows Server 2016 (23)
Windows Vista (52)
Collections:
Other Resources:
Trojan and Malware "Puper" Removal
Trojan and Malware "Puper" Removal
✍: Guest
While looking at the c:\windows\system32, I noticed 3 strange suspicious files:
>dir C:\WINDOWS\system32
07/21/2006 09:43 PM 17,750 vqfupqnr.exe
07/24/2006 12:22 AM 17,750 opuryycl.exe
07/24/2006 09:51 PM 17,750 uceysmkw.exe
Zipped all 3 suspicious files into a zip file, exe_200607.zip, and delete them from the system directory.
When tried to open this zip file, my McAfee VirusScan On-Access Scan showed and reported that those files are Puper trojans:
vqfupqnr.exe Puper Trojan Deleted
opuryycl.exe Puper Trojan Deleted
uceysmkw.exe Puper Trojan Deleted
Okay. This was nice. VirusScan is doing the job to pretect my system. But that VirusScan report seemed wrong. None of the Puper descriptions on the Internet says that Puper Trojan will create an .exe file with a name of 8 random letters.
Need to find another virus detection tool to look those suspicious files.
Conclusion:
* Puper Trojan modifies Internet Explorer settings to redirect default starting and search page to some advertiser Web site.
* McAfee VirusScan reports a 17,750 bytes uceysmkw.exe file as a Puper Trojan file.
2009-02-10, 5372👍, 0💬
Popular Posts:
How to restore Bluetooth icon in the taskbar (system tray) on Windows 7? I removed it by a mistake. ...
What is the "Background Tasks Infrastructure Service (BrokerInfrastructure)" system service on Windo...
How to Verify Apache server configuration for PHP scripts support? If you have followed our Configur...
How do I display the total amount of time required to play all of the songs in my library? To view "...
How to view system properties on Windows Server 2012? I just want to get some basic information abou...