Daifne
06-09-2009, 12:29 AM
Got an interesting one today. It's a variation of the normal rogues, but it plays this sound file during the logon for one of the user accounts (not the other). http://www.megaupload.com/?d=X2RG64AQ Yes, I have scanned the mp3 and it's clean. Very odd to hear right after the normal XP logon "song".
The rogue is PCenter (http://remove-malware.net/how-to-remove-pcenter-rogue-anti-spyware/) and the mp3 loads, I think, from this reg key: HKEY_USERS\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Key set to C:\Program Files\PCenter\pc.exe
Doesn't look like it's going to be too difficult to remove. I just wanted to share the weird logon sound it plays.
The rogue is PCenter (http://remove-malware.net/how-to-remove-pcenter-rogue-anti-spyware/) and the mp3 loads, I think, from this reg key: HKEY_USERS\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Key set to C:\Program Files\PCenter\pc.exe
Doesn't look like it's going to be too difficult to remove. I just wanted to share the weird logon sound it plays.