Author Topic: zip_dump trojan virus?  (Read 6464 times)

0 Members and 1 Guest are viewing this topic.

Offline PetieG

  • Newbie
  • *
  • Posts: 8
zip_dump trojan virus?
« on: March 21, 2006, 05:18:47 PM »
Recently i have been getting a virus alert from the on access scans -- it always is in my temp dir and is named zip_dump.exe -- or some combination of that filename (3936_zip_dump.dl_, 3936_zip_dump.cab, etc.).  I bet it's Google Desktop search using some util to index .zip files -- cause i'm getting this several times a day (and i've just started indexing yesterday).  It comes and goes from the tempdir.  Can anyone confirm this?  Avast Home safely deletes the file np -- did a full scan and nothing comes up.  Please let me know.  thx!!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 81651
  • No support PMs thanks
Re: zip_dump trojan virus?
« Reply #1 on: March 21, 2006, 05:34:41 PM »
Well nothing comes up on a google search (strange if it is a google tool) for 3936_zip_dump.cab or 3936_zip_dump.dl_ or zip_dump.exe, which under normal circumstances I would say is suspicious.

What is the trojan name given by avast ?
What is the full path to the file/s ?

Some trojans deposit their contents in the temp folder/s so it may not be google's desktop search (I don't use it so I can't say for certain). However, if it were to do with the Google Desktop Search, other avast users would also be experiencing this and this is the first I've seen on the forums.

Download the program appropriate for your OS (?) and run it, Ewido Security Suite If using winXP or a-Squared free if using win98/ME, preferably from windows safe mode
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 19.6.2383 (build: 19.6.4546.508)/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ WinPatrol+/

Offline PetieG

  • Newbie
  • *
  • Posts: 8
Re: zip_dump trojan virus?
« Reply #2 on: March 22, 2006, 04:04:34 AM »
Name: Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\DOCUME~1\peter\LOCALS~1\Temp\3936_zip_dump.dll" file. 

Will run spyware app (will use Windows Defender).  will post if something comes up. TIA!!!

Offline CharleyO

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7087
  • Be alert for error code - ID 10T
Re: zip_dump trojan virus?
« Reply #3 on: March 22, 2006, 06:06:54 PM »
***

Welcome to the forums, PetieG.    :)

I doubt that Windows Defender will be enough ... or maybe not good enough. Appearently, you have XP as the OS though you still have not directly said.

Take David's advice and use the free Ewido which works with both W2000 & XP.    :)


***
Self-built desktop (8 years old) - AMD64 3200+_Gigabyte GA-K8NS Ultra-939_4 gb RAM_GeForceFX 5800w/256 ram_XP/SP3_Avast 7_MBAM_ZA Free __and__ Toshiba Satellite Laptop_W7-64bit_ 4 gb Ram_Avast 8_MBAM

Offline PetieG

  • Newbie
  • *
  • Posts: 8
Re: zip_dump trojan virus?
« Reply #4 on: March 22, 2006, 11:06:44 PM »
OK, sorry.. i have WinXP Pro SP2 current patches -- ran said spyware app ewido -- didn't find anything beside tracker cookies and instances of VNC i have laying around in a software directory.  Other than that i'm stumped -- this thing is popping up a few times a day... I still thing GDS is unzipping some files to scan in them... but i may be wrong.  I will disable gds for a few days and report back. 

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 81651
  • No support PMs thanks
Re: zip_dump trojan virus?
« Reply #5 on: March 22, 2006, 11:17:29 PM »
Also useful as a diagnostic tool for what is running on your system - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR - Post your hijackthis-Log here for a diagnosis: tomcoyote.org/hjt
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 19.6.2383 (build: 19.6.4546.508)/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ WinPatrol+/

Offline PetieG

  • Newbie
  • *
  • Posts: 8
Re: zip_dump trojan virus?
« Reply #6 on: March 22, 2006, 11:40:39 PM »
everything seems OK -- got a bunch of question marks -- but all seem to be for MacDrive (i have a dual-boot thinkpad w/ XP and OSX 10.4.5!! -- sweet!).  everything else checks out ok... will update in a few days to see if it comes back.. thx everyone.  !!!

Offline PetieG

  • Newbie
  • *
  • Posts: 8
Re: zip_dump trojan virus?
« Reply #7 on: March 30, 2006, 06:21:19 PM »
Well, several days w/ no GDS and no warnings... turn GDS on and this pops up again... i'm going to chalk this one up as GDS doing something ... i could be wrong though..

Offline Spiritsongs

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1757
  • Ad-aware orientated Support forum(s)
Google Desktop Search
« Reply #8 on: March 30, 2006, 06:31:31 PM »
 :)  Hi PetieG :

      I assume you mean you have the Google Desktop Search
      toolbar on your machine !? If yes, I would NOT have this
      popular, but to me "suspect" toolbar on my machine.
      Have been seeing "reports" of possible "problems" with
      it ; when I want to do a Google search, I go to their
      website and put in my "search term" & go from there.
      Much safer .
For the Best in what counts in Life :
www.tacf.org

Offline Wraith Daquell

  • Newbie
  • *
  • Posts: 2
  • God is my King
    • NITEGames
Re: zip_dump trojan virus?
« Reply #9 on: May 11, 2006, 06:44:37 PM »
The zip_dump is related to Google's GDS... not the sidebar but the actual engine. I'm contacting Google on it; will post back in a few days.
...there is only one Daquell.

Offline PetieG

  • Newbie
  • *
  • Posts: 8
Re: zip_dump trojan virus?
« Reply #10 on: May 11, 2006, 07:11:31 PM »
Yes, well, it's not specifically the GDS toolbar, but the entire GDS product (sure beat's Outlook's searching capabilities). They just came out w/ a new version of which i have not tested -- but maybe it is fixed... !!>?? 

anyway, i'm on a Mac now so i'm not overly concerned w/ this problem anymore.  Thx!!

Offline Wraith Daquell

  • Newbie
  • *
  • Posts: 2
  • God is my King
    • NITEGames
Re: zip_dump trojan virus?
« Reply #11 on: May 11, 2006, 07:54:39 PM »
The problem still persists in the new version. But hurrah that it's not bugging you anymore.  ;)
...there is only one Daquell.

Offline hypotaxis

  • Newbie
  • *
  • Posts: 1
  • Kia kaha!
Re: zip_dump trojan virus?
« Reply #12 on: August 10, 2006, 01:07:12 PM »
I had the same problem with zip_dump.exe. It turned out that it was an infected file but that it was in the attachment folder of my mail client but as a hidden file.

As GDS it's indexing it kept hitting the file and avast! was triggered. By running avast! with a "thorough" seach and making sure the option to search archived files was checked th file was found and deleted.

No more problems!