spidey
Joined: 24 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Thu Aug 24, 2006 5:18 pm |
|
 |
 |
 |
 |
I searched the Internet for any information concerning this file, an executable .jar file. According to Sophos (http://www.sophos.com/virusinfo/analyses/trojmultidrdw.html) this is dropped by a trojan along with another file, CSrss.vbs.zip.
I ran ClamWinAV on the file and it did not find anything.
Is this something about which I should be worried?
A search on Google, Ask.com, Dogpile & Surfwax turned up only a few hits, and most of them were about HijackThis output.
Thank you!
|
|
spidey
Joined: 24 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Thu Aug 24, 2006 8:25 pm |
|
 |
 |
 |
 |
I think I found out some information concerning this file:
http://www.ej-technologies.com/products/exe4j/overview.html
exe4j is an EXE creator for Java; it seems as if any program, legitimate or not, can use the library file, exe4jlib.
I've looked at some of the code for this, but I don't know enough about Java to see if it's benign or not.
|
|
budtse
Joined: 14 Jan 2006 |
Posts: 0 |
Location: Belgium |
|
 |
Posted: Thu Aug 24, 2006 8:38 pm |
|
 |
 |
 |
 |
Try to scan the file with the online scanner on http://www.virustotal.com.
|
|
spidey
Joined: 24 Aug 2006 |
Posts: 0 |
|
|
 |
Posted: Thu Aug 24, 2006 10:37 pm |
|
 |
 |
 |
 |
Thanks, I ran the file through their site & none of the anti-virus programs had a problem with this file; however, I did not think they would. It seems as if it can be part of a trojan drop which is used to run the actual virus program. The .jar file is only the actuator rather than the virus. It can also, I believe, be used to install legitimate programs.
|
|