New malware??

Discussion in 'Malware Help (A Specialist Will Reply)' started by george-george, Feb 27, 2006.

  1. george-george

    george-george Private E-2

    I recently was called to solve an eractic computer. It took a while but I found a directory on Windows XP home addition with the name "movlayer" it was hidden and protected. It contained a executable called hidaksie.exe. I had to boot to a linux os off of a cd to rename the directory and the executible. I also had to use calcs? to get permission to go into the directory. There were large cache areas and many more files. I deleted everything and the computer has work well since. has anyone ran into this configuration and if so can you tell me anything about it.
    Thanks george-george
     
    george-george, Feb 27, 2006
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    movlayer seems to ring a bell. I believe it is typically related to stuff for playing MOV files on porn sites. The exe you named sounds familiar too but they typically can have any randomly named file.
     
    chaslang, Feb 27, 2006
    #2
  3. george-george

    george-george Private E-2

    The information doesn't google at all.
     
    george-george, Feb 27, 2006
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What information? The EXE file? As I said they are typically random names. MovPlayer does show up and they are all porn links.
     
    chaslang, Feb 27, 2006
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds