mathze

Ok, how can i find the tool for decoding??? what file is needed, i have the spam mail with the zip-in-zip file whitch include the script. or is the "virus" needed, i have the files collected via a testmachine in a virtual-pc.and i have grabbed the domain-names the needed by virus where should i send it all thx mathze

hello marco, do you have new informations for us? 1. the virus was download by loading via an spam mail. 2. the mail has a zip-in-zip file without password. 3. why can start users on a ts-server the script. 4. the scanengine has not stop the download and user-process. why?