sysrnj.exe - Dangerous
sysrnj.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Always arrives with two attachements. Tries to send mails to all addresses in Outlook through one of several ISPs in Poland. Some of the code is packed with UPX. When the mail is viewed the attachements are automatically saved and a script in the mail is run to view the .chm file, which in turn executes the attached .exe file. En second version of Blebla overwrites datafiles with 21 different file extensions. This version uses 18 pre-defined SMTP servers to spread itself.