srunner.exe - backdoor ?

D

dj_karl

Guest
#1
i've notcied this process running on my machine, i've haven't got a clue what it is and i've been unable to find out. I've run update to virus scanner, did full scan nothing found. Ad-ware and nothing found. I've done searches on the system for the file it doesn't find it, but it still runs on startup.

anyone heard of this?
 
D

dj_karl

Guest
#3
i could only find that as well, when i looked on google. I haven't installed Service Installer?
 
E

eNuffSaid

Guest
#4
Hi,

Find the executable (srunner.exe) on your system, right click it, click properties, select the "version" tab...

Does it have a company name listed?

Regards,
Willem Moolenaar
 
D

dj_karl

Guest
#5
turns out it's a nice trojan or something similar
it had a xdcc bot running a irc server by and ftp open on my machine

file were stored in C:\WINDOWS\CURSORS\meta\oledac\su
and also C:\WINDOWS\CURSORS\meta\oledac\backup

it had added itself to my service disgusing itself as

SPOOLSVC
 

Members online

No members online now.

Latest posts

Latest profile posts

Perris Calderon wrote on Electronic Punk's profile.
Ep, glad to see you come back and tidy up...did want to ask a one day favor, I want to enhance my resume , was hoping you could make me administrator for a day, if so, take me right off since I won't be here to do anything, and don't know the slightest about the board, but it would be nice putting "served administrator osnn", if can do, THANKS

Been running around Quora lately, luv it there https://tinyurl.com/ycpxl
Electronic Punk wrote on Perris Calderon's profile.
All good still mate?
Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,971
Messages
673,299
Members
89,016
Latest member
Poseeut