setup30.exe - Dangerous
setup30.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Then, the worm suspends for 5 minutes, then launches one of its payloads depending on system time.
After executing the payload, the worm checks whether the following registry value is present:
HKLM\Software\Microsoft\Windows\CurrentVersion Install=1
If the value doesn't exist, the worm tries to send itself to the senders of messages that exist in MAPI default client's folders.
The subject of the message sent is "New antivirus tool", and the message also contains the attachment "Antivirus.exe" that is the virus itself,
and also contains in the body: Hey, checkout this new antivirus tool which checks your system for viruses
Use RegRun Startup Optimizer to quickly remove this virus.