For All.

[Manuel]

Hi U All.

There is a new face for virus that is actualizing more and more day after day.
This "new" class of piece of software let your PC act as  a P2P system. This happen in hidden way! Be warned so!
This kind of software is also used to transfer hi-prohibited materials and you are not conscious of the fact !

So check:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
....
and
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002
...

in the BINARY STRING you have to have the right dependency... such as "mswsocket.dll"
.....
if not so...check the file that this REGKEY is pointing at .....

take care.
Manuel.