ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Unknown file - possible new trojan drop: exe4jlib.jar
spidey


Joined: 24 Aug 2006
Posts: 0
Reply with quote
I searched the Internet for any information concerning this file, an executable .jar file. According to Sophos (http://www.sophos.com/virusinfo/analyses/trojmultidrdw.html) this is dropped by a trojan along with another file, CSrss.vbs.zip.

I ran ClamWinAV on the file and it did not find anything.

Is this something about which I should be worried?

A search on Google, Ask.com, Dogpile & Surfwax turned up only a few hits, and most of them were about HijackThis output.

Thank you!
View user's profileSend private message
spidey


Joined: 24 Aug 2006
Posts: 0
Reply with quote
I think I found out some information concerning this file:

http://www.ej-technologies.com/products/exe4j/overview.html

exe4j is an EXE creator for Java; it seems as if any program, legitimate or not, can use the library file, exe4jlib.

I've looked at some of the code for this, but I don't know enough about Java to see if it's benign or not.
View user's profileSend private message
budtse


Joined: 14 Jan 2006
Posts: 0
Location: Belgium
Reply with quote
Try to scan the file with the online scanner on http://www.virustotal.com.
View user's profileSend private message
spidey


Joined: 24 Aug 2006
Posts: 0
Reply with quote
Thanks, I ran the file through their site & none of the anti-virus programs had a problem with this file; however, I did not think they would. It seems as if it can be part of a trojan drop which is used to run the actual virus program. The .jar file is only the actuator rather than the virus. It can also, I believe, be used to install legitimate programs.
View user's profileSend private message
Unknown file - possible new trojan drop: exe4jlib.jar
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic