ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Determining if I should delete an infected file.
Reynolds777


Joined: 24 Sep 2009
Posts: 0
Reply with quote
Hi I am new to ClamWin but love having antivirus that doesn't take over the computer.

My scan found 2 Trojan agents. I checked the files with Jotti and most of the scanners agreed it was a virus.
The problem is that the files are in C:/Windows/SysWOW64 directory.
they are called xwr48753.dll and xwr61817.dll if that helps and I dont know how to determine if those are system files.

any help would be appreciated.

Can I delete them?

Thanks in advance
Rey
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Reply with quote
It looks like you can delete those files. That WOW directory doesn't look like a real Windows directory, and if most AVs on Jotti say they are malware, they are evil and should be deleted. You did good to check with Jotti. The AVs there are pretty high quality. VirusTotal has more AVs but they have so many, and not all of them are equal. If a couple of these AVs see evil, you can probably believe it anywhere: Bitdefender, Kaspersky, NOD32, Dr. Web, McAfee, Microsoft, Symantec, and Trend Micro.

If you are still in doubt after using Jotti orVirusTotal, upload the file to Threat Expert at https://www.threatexpert.com/submit.aspx on the web. They will give you a detaled analyis of the file. This is for exe and dll files. For html, javascript, and pdf files, upload them to Wepawet at https://wepawet.iseclab.org/ on the web.

Regards,
View user's profileSend private message
Determining if I should delete an infected file.
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic