LOGOFF.EXE - Dangerous
%WinDir%\LOGOFF.EXE
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
LOGOFF.EXE is known as: Dropper/Xema.21504.AH [AhnLab] packed with UPX [Kaspersky Lab].
MD5 of LOGOFF.EXE = 59F966A5BADDAAC9E8C983FDFE3BC9A3
LOGOFF.EXE size is 21504 bytes.
Full path on a computer: %WINDIR%\LOGOFF.EXE
Related Files:
C:\CLEANUP.BAT
C:\CLEANUP.EXE
%TEMP%\4.TMP\LOGOFF.BAT
C:\DRIVERS\KDESCK.EXE
C:\DRIVERS\TDESCK.TXT
%WINDIR%\SYSTEMK.EXE
%WINDIR%\BAEKV.TXT
%WINDIR%\AVAST.EXE
%WINDIR%\INICIAR.BAT
%WINDIR%\LOADE.EXE
%WINDIR%\LOGOFF.EXE
%WINDIR%\MSNM.EXE
%SYSTEM%\DRIVERS\XMXIGR.SYS
%WINDIR%\WINRAR.EXE
C:\ZIP.EXE