Atención: Foro y web cerrados en modo lectura.Tras 21 años online, hemos dejado de actualizar la web y el foro, aquí tenéis la información ¡Muchas gracias por vuestro apoyo!
Vendedor:Matrix Technology NetworkCategoría:MalwareTipo de Objeto:ArchivoTamaño:22179 BytesUbicación:c:\windows\escritorio\personal\sipspi32.zipÚltima actividad:15-06-2004 03:00:00Nivel de riesgo:BajoComentario:Object "SIPSPI32.dll" found in this archive.Descripción:No Detail Information Available.
I have sent that same file to Aaron. Along with this one. GDICAI32.dll download the one attached to Fats' post. Uses MSHTA....pretty interesting. Generates popups and hijacks to 123Mania.com.R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.123mania.com/0409/ie.aspR3 - URLSearchHook: SrchHook Class - {15651C7C-E812-44a2-A9AC-B467A2233E7D} - C:\WINDOWS\SYSTEM\GIDCAI32.DLLO2 - BHO: (no name) - {622CC208-B014-4FE0-801B-874A5E5E403A} - C:\WINDOWS\SYSTEM\GIDCAI32.DLLO2 - BHO: (no name) - {9C5B2F29-1F46-4639-A6B4-828942301D3E} - C:\WINDOWS\SYSTEM\SIPSPI32.DLLO4 - HKLM\..\Run: [LoadSIPS] rundll32.exe C:\WINDOWS\SYSTEM\SIPSPI32.DLL,SIPSPI32O16 - DPF: {15651C7C-E812-44A2-A9AC-B467A2233E7D} (SrchHook Class) - http://www.123mania.com/GIDCAI32.cabO16 - DPF: {9C5B2F29-1F46-4639-A6B4-828942301D3E} (HTML Class) - http://www.123mania.com/SIPSPI32.cab
Well, what is http://masminutos.com/ , spanish written " There is not no place Web in this direction. " ? Looks like they created it?And, yes it installs BHO and generates lotsa popups. GDICAI32.dll also and it is created by Matrix technology Network. Working more on it.Regards
Aviso Legal | Política de Privacidad | Política de Cookies