This keeps getting hijacked by malware at a particular client. I am in two minds about it being legit or totally malicious. I think it has something to do with Microsoft support for Asian languages ...
Could anyone who has any thoughts pelase do share.
Thanks, so I come to the conclusion that it is legit in most circumstances. Anyway , this client shouldnt need to use asian language installs so they can remove it.
August 31st, 2010, 07:29 PM
Here are a couple things to try in the future if you find a suspicious file. Basically Virustotal will scan the file with ~50 AV programs and you can compare the results. http://www.virustotal.com/
CWSandbox runs the application on their servers and give you a report on what files are created and where. By creating the appropriate sandboxed Windows environment, anything from infected Office documents to malicious URLs or scripts in Flash ads can be analyzed.