I found this file in sandboxie when launching a setup.exe:
http://rapidshare.de...ndii32.exe.html
I putted it in cwsandbox witch told me error#2
I putted it in sandboxie, and it creates 3 php files this is the content, crypted, not able to decrypt it, help needed:
php12.tmp:
[codebox]<?mmcache_load("eJxdUE0LgkAQndFVs49DHeofeCjIc7IEKoEeigV/gFSsJZSKCv79drAkHNh5w3tvZnb3fA79MDqBBgAIBAug2EAfB/A56itV1bLxXNcVkaCzjy+x8gOnpAHqS4VZ/pLpQ7bpvSxaWbRNgkqxlJIXOYno6IhM80CwkbBjbE2bpoqrnpWi97frm4YTS9jRFTklU/UatK6sZJEY0OsZOhYazBSTgQj4hAphj5YF3B6GTRF1k9xdnbdSzP6aZ8MD5z/T/VU2crs+IuL3gz6AfSwJ");?>[/codebox]
php13.tmp:
[codebox]<?mmcache_load("eJx9UktPwkAQ3qFreSsgIPhCPXCAUHrwAjYmQEjgAK6pB2+k0lUaS0toNfrrdRaw4RHcw+zO981
7djDotDq9LgkRQoCI64aI01zqpJb9aWkgxfA5m8wsx1JejKkgNFjYgRRH+WrZfMS/LM/3qpTI/3gAgCTj/eHYlvNekRshYZxDZM69Zr1eZz1W7z4/dYd6/2GoB34UM6X/Mr1xfzR2HZ87vqdLZJmMf6HuWa7jQfkAJEqbISbvclUqKyKlCHonBIvsGrW1iBiIJkQU6fCCntmuyfUw
6hR107YxUwzCNKon1rGOlgjKTq4Ibownj3BIktg/qnoccWnpAOUjiNPDKk3WWHoNbmvpIExmb/epVXXoYRq+AeVjSNHM2gJufU8R4VD7Qz9dy1RVRVVV0R/LbYVoazlRgyZEfrVgz5+P5nxmG2OuZ7dTnkCW5llho/bCYrTFndDFYK6n+BOiC2405VN3/l3JVpTGmSjyaPM7DFr9YTCKi72jOEcmgszUsBzBQvkSzulF84yVtpkqLTXY1TbavwZ6Fao07pdLEucXD
c2HLw==");?>[/codebox]
php14.tmp:
[codebox]<?mmcache_load("eJyFlft20kgcx/NLppRC7/SuIt5iBYUWbbvB2G5TW7sqOhrFu5yUDhSbEhbStWf/2HP0PfYd9jH2rXQmCZPb9mwOJ5n8+F1nvh+oVne2d/Z3BVEQBBCkYfo4JKZhGtTiLRYFdi0L7qVTP2mILvq20bNhi4VRK1CrRBekcwhb4KTTRc/Wt3uwJQpsiVHApqmIxeKhUEZNHWLRKrsl6DcJ15t+dIm+MnN/FeRhkFACj/gWTR1xsqUi2VLMqrJb2s9mks4XMc3rjA6+OT1gdZKBOmOQRKN4IlhnwqkzGZhYUyd5rqlwz+ODyDLI0z
COpvCMb9HUGZZrWwWWydk1PBssNcvsKrvNUXPaTVvvka5pNIie8UZttjuGCfI8ZNAcXggZN9HCJjgHJ43
R23HbNOvdntUg/T4tF3p1L/CeXhTrqe4s/vYaXF/68b35g7YMA3fVXYE0zvojdt1un5C62T5p285s8A8KOAJ452MS0uUaOe3RASQQQSrStyPb7lZKJdvotI6
N4xZ9rKxsFFuW1TJJ12iRfrFhnZRaVssqkjOiM1ElnZHpuRonBOQhQCCNsCrGH2SVOeHhqJOmDg82n831
9YAfYXKwhVaXdPSEdyDNM5BHIIGSOB1oWlPTwSy9g5Co/CwpTxZHRufQJExXKTTqqIM11bA6NunYfZAnYNwVg84ExlL/CfIUTLrbrUzjTDiRpmb41jJlIVaRWM3K9NgsmkkWxNl1Zd4RRShowWsahJx7rE7Li4OWe8Q4rMzX5qLt
ZZdgDi3WLvDWrl+8sHcRX+LvmSxAma7QpWJWzJbx5WiGqRy67A54LyvmCmJ2rcwkQd/za/kl5Qq+6m+3pl51ULsWTaKp13jP18Edrfm117ZJ5YpyA8vRaWW+RTcH3g3T6pPKDWUZ3woWvMU982HPZa
WAb8cldJv736H+Kaa4I0KhooprVApKkeliUnB+VHOl33NMjnkmRx5WioexIPh3McDMSoiZ1SAzZVg9nxk
lxox5ekYcZu7GmLkHd31myg4z6/GB189hZiOk9rUAM7/AGtrAlRAzlXOYuR/KokSYUUFB9/UHMWY24YHHzJbPzK/0f8hlZhtrUUFofGt3gsxsjz1EO5SZh9+VPfwoGvToP5nZDzGzV9uNMfMb7KL92mOfmSeP957gpz4zVY+
Zp8WqWP0LP4sx8xw985ipis8LYvVbGTxmvuWbCsYvghJ+4TDzMs7MS96zHmYGK6/w6+i0r/kW1cIkvFLe4LfBgm+557uw5xvlPf4Ql9AH7v8xLv73yqf/ZeZzPOzTprsh7PoJ9jFc9A==");?>[/codebox]
Many thanks in advance, I have to know what this thing does












