sqlssl.doc .exe - Dangerous
%sysdir%\sqlssl.doc .exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
1. Creates the following copies of itself:
%System%\SQLSSL.DOC
%System%\SYSINFO32.EXE
%System%\TRACE32.EXE
2. Creates a service:
Display Name: Windows Secure SSL
Image Path: %System%\TRACE32.EXE
Description: This service implements the secure HyperText Transfer Protocol (HTTPS) for the HTTP service.
3. Changes the HOSTS file to block antiviral sites and Windows update.
4. Sends itseld by e-mail using adress book.
Use RegRun Startup Optimizer and AntiSpyware to remove infection.