3 Replies Latest reply on Dec 14, 2010 4:58 AM by tonyb99

    Threat service.exe (mirc.exe melt.bat) not detected by VSE8.7??

    redbaron51

      Hi all

       

      I think we have got a trojan on some user profiles which have not been detected by VSE8.7

       

      Basically some user have a service.exe hidden file on their Apllication Data folder under their profiles. The original properties of the file show mirc.exe. It also place a batch file Melt.bat on the same location

       

      The service.exe loads everytime user logs in (it is in the HKLM\Softwaer\Microsoft\Windows\Current Version\Run key) and hammers the CPU.

       

      I am still trying to find more info on the net, but still no success.

       

      As a test for a user, I deleted her profile and re-image her machine. It seems to be going well so far.

       

      Does anyone know anything about this threat? Any comments are appreciated.