actskn45.ocx

[chpnp]

ok,
I ust instal Avast home on my laptop and get a win32:trojan-gen on that file that was in windows/system32.
How do I check now if that file is REALLY infected or if this is a false positive, and what is the impact on my system ?
For the time being it is moved to the chest

Thanks
Christophe

[Eddy]

A good place to start is alwasy GOOGLE
Another place is JOTTI

Please use the search option on this board before asking, as questions like this have been answered many times already.

[DavidR]

If it isn't a typo then it could well be suspect, actskn45.ocx ?
There is an actskn4.ocx in the system32 folder, which is used as a third party process for the avast skinning ?
You could also check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner. You can't do this with the file in the chest, you will need to move it out.

If you haven't already got this software (freeware), download, install, update and run it, preferably in safe mode.
1. Ad-Aware
2. Spybot Search and Destroy
3. Spywareblaster Don't install this until you are clean.

[Henrique - RJ]

actskn4.ocx seems to be installed by software  Real Monitor Spy made a test in the VirusTotal of its NewSpy.exe installer

[DavidR]

Well considering that the original poster reports actskn45.ocx (as in the title) and not actskn4.ocx, this doesn't seem relevant.

actskn4.ocx is also installed by avast as I mentioned for the use of skins in avast.

The one in my system32 folder has an MD5 of 99825c8aed2fa0ac76aa0fad770f44c1 and SHA1 of 6d19de49d974f8645147d3001fe2cda73ed17742 neither of which match that of the one you uploaded to VirusTotal. So the ony thing in common they have is a file name.

So, as Bob said in your other topic, where did you get this sample you uploaded as it clearly isn't the one that avast loads for using the skins.

This is the one avast loaded and I uploaded to virustotal.