| Lutfi Baran | my observations about ofcdog.exe
in every reboot PC, this file(ofcdog.exe) copied itself randomly by default to
windows\Temp folder as different names; for example, CL7A35.EXE, RP4F50.EXE, SB10B7.EXE, OX97E2.EXE...etc
And then, this renamed file has been executing .
you can also see this file(for example, CL7A35.EXE, RP4F50.EXE, SB10B7.EXE,
OX97E2.EXE...etc) in Task Manager, but you can't see ofcdog.exe file.
it is very interest, is it? | | Henrik C. | The OfcDog acts quite suspiciously as it replicates itself to the windows\temp directory using a random filename. After long and troubled debugging of an infected machine I could finally tag this application as being safe; spent a lot of time on this, so what I'd like to know is why this dubious behavior is necessary? | |
|
