Quote:
Originally Posted by rowan
*** You might want to rethink your decision to reinstate that file... ***
Just posted on another board, NOD32 also flagged it:
31.01.2009 02:03:57
HTTP-Check
File
hxxp://msvcp50.biz/getfile-081220-aps.php?d=20&trk=01310103643214609&s=mdc
Win32/TrojanDownloader.Agent.NXY Trojaner
Application: C:\My Documents\oil\My Documents\NiftyStats\stats.exe
I presume msvcp50.biz is nothing to do with niftystats, it's registered at Public Domain Registry which is a breeding ground for cheaters.
|
And the domain is hosted in china
