Backdoor Trojan V2.00

  • Thread starter Thread starter Glenn
  • Start date Start date
G

Glenn

Twice I've received an automatic update from Microsoft
and twice the file sharing library ole32.dll has changed
from file size 1.115 kb to 1.145 kb. Normally when a file
is replaced the previous file is renamed, in this case
ole32.dll becomes ole32(0).dll before the new file is
active. There are no old files and the new ole32.dll is
reported on my system as having Backdoor v2.00 internal.
This only happens with the Microsoft automatic update.
I've removed all unknown run files, manually edited the
registry and my system has a firewall with the anti-virus
automatically updated. I rename the new ole32 file and
restore the previous version. What I want to know is why
is Microsoft updating my system with a backdoor trojan?
 
Perhaps your system got hijacked (check %windir%\system32\drivers\etc\hosts)
and it isn't really updating from Microsoft, but some bogus site instead.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top