Robby
10-18-2000, 23:38
Beware
A very dangerus Trojan in one Gsm file as soft for calculating C35 log files.
The name is GSMGuru.zip 408245k the zip has inside one other file with the name
Gsmguru.exe 791552k.
When you first run the file you will see one fake image
and the trojan automatic copy one file to c:\windows\command\RunDil32.exe
size=416256k with no icon wich you can't delede.
Also change the registry.
Actions !!
a) Del from registry
================================================== ==========
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
"MicrosoftShare"="C:\\WINDOWS\\Command\\RUNDIL32.EXE"
================================================== ==========
b) Restart your computer and delete the file RunDil32.exe from c:\windows\command
Now you are Safe.
The trojan doesn't detected from any Unvirus software like mcfee or Norton.
Only with firewall protection, with I found it .
With this Trojan the GSM hacker can have full access to your computer.
Regards and good luck
Robby the Greek
ICQ UIN : 7623773
email: robby-gr@usa.net
Url: http://come.to/cleverphone
\|/
Be Happy (oo )
( <_ )
-------------o00o-----o00o-------------
A very dangerus Trojan in one Gsm file as soft for calculating C35 log files.
The name is GSMGuru.zip 408245k the zip has inside one other file with the name
Gsmguru.exe 791552k.
When you first run the file you will see one fake image
and the trojan automatic copy one file to c:\windows\command\RunDil32.exe
size=416256k with no icon wich you can't delede.
Also change the registry.
Actions !!
a) Del from registry
================================================== ==========
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run]
"MicrosoftShare"="C:\\WINDOWS\\Command\\RUNDIL32.EXE"
================================================== ==========
b) Restart your computer and delete the file RunDil32.exe from c:\windows\command
Now you are Safe.
The trojan doesn't detected from any Unvirus software like mcfee or Norton.
Only with firewall protection, with I found it .
With this Trojan the GSM hacker can have full access to your computer.
Regards and good luck
Robby the Greek
ICQ UIN : 7623773
email: robby-gr@usa.net
Url: http://come.to/cleverphone
\|/
Be Happy (oo )
( <_ )
-------------o00o-----o00o-------------