From: "Buffalo" <Eric@nada.com.invalid>



| David H. Lipman wrote:
>> From: "Buffalo" <Eric@nada.com.invalid>



>>> I will delete that setup file and I will keep the
>>> winnit\system32\sysrestore.dll in MBAM's quarantine in case I wish
>>> to analayze it further.


>> Please upload the file here...
>> http://www.uploadmalware.com

| Winnit\System32\sysrestore was submitted just now.
| It is back in quarantine in MBAM now.


MD5 of the file is 2c10b592da12118cfd3b9de0aed4540e
Thank you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp