rahul wrote:
>i downloaded daemon crypt from this link http://rapidshare.com/files/13572500...ic_v2.exe.html
>and it got lost on its own without me moving it and i cannot find it.
>i am afraid if its a RAT. help.....
My system tries to default downloads to [my documents] until I specify another
location. That particular file drops an executable into the [Windows/System32
folder] so you might want to look there for it as [incom_.exe] with the
ownership property as [evil inside].
I didn't allow it to play out its full bag of tricks
but it sounds interesting.
You might also want to search for a couple DLLs it drops there as well;
[reginv.dll] and winkey.dll]