For me it is OK to replace or to eliminate the OJ.exe file
Peppe
--- Dom 13/9/09, edgar.sol...@web.de ha scritto:
> Da: edgar.sol...@web.de
> Oggetto: Re: [JPP-Devel] Virus/Spyware 'Troj/Agent-KRQ' in OpenJump 1.3 zip
> file
> A: "OpenJump develop and use"
> Data: Domenica 13 settembre 2009,
Downloaded the recent version of the converter and redid peppe's steps...
interestingly the result still has some hits, obviously the way of
executing a batch file during run time is something some malware does
similarly.
Also the resulting exe file is UPX packed, which is often regarded as
susp
