Guest Bahal Posted September 2, 2013 Share Posted September 2, 2013 hxxp://imageshack.us/photo/my-images/268/xpcd.jpg/ I kept getting errors of .exe files with weird names stop working when I had avira for the past 2 days. I found where those exes where located (Local/Temp/...) and deleted them but they kept being generated and each time I got the same error of them crashing, was that avira not letting them work? So I deleted avira and installed ESET NOD32 AV 6 and just a little a bit after installation I got a warning like the picture above which made me so happy because it had also found the generator the tutle.exe. I clicked clean and after that I did a full system scan which took 5 hours. After the scan was error I got the same warning again and when I checked the tutle.exe I found out that it was still there?! and also in the NOD32 Running processes it says that the tutle.exe is safe!? I tried malwatebytes antimalware and it says that tutle.exe is a trojan dropper. I also tried to sumbit it for analyze but NOD32 gave me the error that it failed to sumbit the file. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,919 Posted September 2, 2013 Administrators Share Posted September 2, 2013 Please submit the file tutle.exe to ESET as per the instructions at hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141. Link to comment Share on other sites More sharing options...
Guest Bahal Posted September 2, 2013 Share Posted September 2, 2013 Sorry, I deleted the bastard using Malwatebytes :/ Didnt expect to get a reply this fast... After deleting the file using Malwarebytes the process is gone and I also found out that MKKE stands for Mortal Kombat Komplete Edition. That .exe probably hid there and generated those .exes right? Link to comment Share on other sites More sharing options...
TGW 15 Posted September 2, 2013 Share Posted September 2, 2013 There should be a copy of that file in NOD32 Quarantine, if so, right-click on it and click Submit for analysis. You probably should send it to VirusTotal as well. Link to comment Share on other sites More sharing options...
Guest Bahal Posted September 3, 2013 Share Posted September 3, 2013 Yeah I sent it to VirusTotal and got 11/40. Link to comment Share on other sites More sharing options...
Recommended Posts