Not sure if CBOClean should have caught this or not but I found it in C:\Windows\System32 when Comodo firewall alerted me that it was trying to connect and my CPU went to 100%. Thank you Comodo Firewall Pro… I’m not sure where it came from or how it got on my computer. However, I am watching it more closely then usual which is pretty darn close.
For waht it’s worth, Eset Nod32 didn’t catch it either.
The file shows as “expIror.exe”, note: capital i (eye), not l (ell).
Got rid of it through a previous system restore point as it seems to create and enter it’s self into the the most recent system restore point.
This may be old news to you folks and perhaps it was not CBOC’s job to catch it but I bring it to your attention none-the-less.
It will be analysed and, if found to be malware, will be added to the database. Please zip and password protect the file, and include in the email why you are submitting it and the password.
This trojan( if it’s so )could be a zero day threat right! And does BOClean guard us against such threats! Haven’t yet tested out the BOClean! Hopefully soon I will!
