sumsemann
07-05-2009, 13:13
Just a warning for anyone downloading the new RC builds of windows 7. Quiet a lot of the downloads have a trojan inbedded in the setup EXE. This should not be an issue if you booted from the DVD and installed, but if you upgraded it may have infected you.
How to get rid:
Extract contents of disk to hard disk then:
The Setup EXE is actually a container, it appears to be a self-extracting EXE. There are 2 files inside, Setup.exe and codec.exe
Codec.exe is the trojan. Extract setup.exe, and then delete the original. The setup.exe inside the container is actually the real install EXE, and I have verified it is clean, and that there are no other infected files on the disk. Then put the real setup.exe into the root of the folder, and build a bootable ISO with vLite.
This trojan appears to be present in a lot of leaks, so do yourself a favor and always check the hashsum of downloads!
http://s253696961.online.de/images/qn08vgltz72uymkmjvsp.jpg
How to get rid:
Extract contents of disk to hard disk then:
The Setup EXE is actually a container, it appears to be a self-extracting EXE. There are 2 files inside, Setup.exe and codec.exe
Codec.exe is the trojan. Extract setup.exe, and then delete the original. The setup.exe inside the container is actually the real install EXE, and I have verified it is clean, and that there are no other infected files on the disk. Then put the real setup.exe into the root of the folder, and build a bootable ISO with vLite.
This trojan appears to be present in a lot of leaks, so do yourself a favor and always check the hashsum of downloads!
http://s253696961.online.de/images/qn08vgltz72uymkmjvsp.jpg