trantula
Joined: 19 Apr 2008 |
Posts: 0 |
|
|
 |
Posted: Sat Apr 19, 2008 9:34 pm |
|
 |
 |
 |
 |
Well i used clamwin portable from portable apps on my memory stick to scan a freinds computer it found a trojan how ever im quite puzzled. As if i look in the folder it supposeldy in i can't find it.
Clamwin found - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP122F.tmp\mscorlib.dll: Trojan.Spy-11241 FOUND.
So i scanned his computer with AVG and it found nothing so im thinking maybe false positive.
So i went onto virus total and copied the file path into the uploader as i cannot find the file on my computer as i cant see it.
It did upload the file and said that flie has been analysed previously.
Only 1 out of the 32 scanners saw the file as infected
Webwasher-Gateway - - Win32.Malware.dam (suspicious)
.dam means damaged file so perheps thats why i can't physically see the file and can't remove it. But is it likely a bad file or is it a false positive???
But to futher speculate if it is bad, and a 'spy trojan' according to clamwin is it likely a keylogger which has injected itself into a windows process? Cuz if it this is bad, he has a steam account with about ?50 of games on it. So he will have to change all his passwords and pray.
Your help will be appreciated deeply, Thanks trantula.
|
|