Reynolds777
Joined: 24 Sep 2009 |
Posts: 0 |
|
|
 |
Posted: Thu Sep 24, 2009 12:44 am |
|
 |
 |
 |
 |
Hi I am new to ClamWin but love having antivirus that doesn't take over the computer.
My scan found 2 Trojan agents. I checked the files with Jotti and most of the scanners agreed it was a virus.
The problem is that the files are in C:/Windows/SysWOW64 directory.
they are called xwr48753.dll and xwr61817.dll if that helps and I dont know how to determine if those are system files.
any help would be appreciated.
Can I delete them?
Thanks in advance
Rey
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu Sep 24, 2009 1:31 am |
|
 |
 |
 |
 |
It looks like you can delete those files. That WOW directory doesn't look like a real Windows directory, and if most AVs on Jotti say they are malware, they are evil and should be deleted. You did good to check with Jotti. The AVs there are pretty high quality. VirusTotal has more AVs but they have so many, and not all of them are equal. If a couple of these AVs see evil, you can probably believe it anywhere: Bitdefender, Kaspersky, NOD32, Dr. Web, McAfee, Microsoft, Symantec, and Trend Micro.
If you are still in doubt after using Jotti orVirusTotal, upload the file to Threat Expert at https://www.threatexpert.com/submit.aspx on the web. They will give you a detaled analyis of the file. This is for exe and dll files. For html, javascript, and pdf files, upload them to Wepawet at https://wepawet.iseclab.org/ on the web.
Regards,
|
|