Category: Backdoor

Description: This program provides remote access to the computer it is installed on.

Recommendation: Remove this software immediately.

Microsoft Security Essentials detected programs that may compromise your privacy or damage your computer. You can still access the files that these programs use without removing them (not recommended). To access these files, select the 'Allow' action and click "Apply actions". If this option is not available, log on as administrator or ask the local administrator for help.

ไฟล์โทรจัน:
file:C:\Program Files\Alcohol Soft\Alcohol 120\Plugins\Helper\AlSrvN.exe

สร้างรีจิสทรี เพื่อเรียกตัวเอง

regkey:HKCU@S-1-5-21-2954227194-3021371245-1790952582-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\AlSrvN
runkey:HKCU@S-1-5-21-2954227194-3021371245-1790952582-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\AlSrvN

ติด จาก patch ของ Alcohol 120% 1.9.8 Build 7612 Silent Install

download and more detail
**Hidden Content: To see this hidden content your post count must be 40 or greater.**