Author Topic: Win32:SkiMorph [Cryp]  (Read 10850 times)

0 Members and 1 Guest are viewing this topic.

Offline Levka

  • Newbie
  • *
  • Posts: 2
Win32:SkiMorph [Cryp]
« on: October 12, 2008, 05:07:49 PM »
HI all

I try install new English learning software from CD and my Avast find this Worm. I buy this software from trusted company and is it very strange :( Also I can't find anything info about this worm. Maybe this is mistake and don't need to be afraid? :)

Avast find Worm in flashex.exe file and i scan this file with http://www.virustotal.com/. Result: 2/35 (5.71%). Here is log:

Antivirus   Version   Last Update   Result
AhnLab-V3   2008.10.10.1   2008.10.10   -
AntiVir   7.8.1.34   2008.10.11   -
Authentium   5.1.0.4   2008.10.11   -
Avast   4.8.1248.0   2008.10.11   Win32:SkiMorph
AVG   8.0.0.161   2008.10.11   -
BitDefender   7.2   2008.10.12   -
CAT-QuickHeal   9.50   2008.10.11   -
ClamAV   0.93.1   2008.10.12   -
DrWeb   4.44.0.09170   2008.10.12   -
eSafe   7.0.17.0   2008.10.12   -
eTrust-Vet   31.6.6141   2008.10.10   -
Ewido   4.0   2008.10.12   -
F-Prot   4.4.4.56   2008.10.11   -
Fortinet   3.113.0.0   2008.10.12   -
GData   19   2008.10.12   Win32:SkiMorph
Ikarus   T3.1.1.34.0   2008.10.12   -
K7AntiVirus   7.10.491   2008.10.11   -
Kaspersky   7.0.0.125   2008.10.12   -
McAfee   5403   2008.10.11   -
Microsoft   1.4005   2008.10.12   -
NOD32   3515   2008.10.11   -
Norman   5.80.02   2008.10.10   -
Panda   9.0.0.4   2008.10.12   -
PCTools   4.4.2.0   2008.10.12   -
Prevx1   V2   2008.10.12   -
Rising   20.65.42.00   2008.10.10   -
SecureWeb-Gateway   6.7.6   2008.10.11   -
Sophos   4.34.0   2008.10.12   -
Sunbelt   3.1.1716.1   2008.10.12   -
Symantec   10   2008.10.12   -
TheHacker   6.3.1.0.108   2008.10.11   -
TrendMicro   8.700.0.1004   2008.10.10   -
VBA32   3.12.8.6   2008.10.12   -
ViRobot   2008.10.10.1416   2008.10.10   -
VirusBuster   4.5.11.0   2008.10.11   -


Thanks for comments and help



Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 81431
  • No support PMs thanks
Re: Win32:SkiMorph [Cryp]
« Reply #1 on: October 12, 2008, 05:59:03 PM »
It certainly looks like an false positive, as GData uses two scanners one being avast.

If it is indeed a false positive (and it seems that way), see http://forum.avast.com/index.php?topic=34950.msg293451#msg293451, how to report it to avast! and what to do to exclude them until the problem is corrected.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 19.5.2378/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ WinPatrol+/

Offline Levka

  • Newbie
  • *
  • Posts: 2
Re: Win32:SkiMorph [Cryp]
« Reply #2 on: October 12, 2008, 06:16:52 PM »
Thanks for help  ;)

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 81431
  • No support PMs thanks
Re: Win32:SkiMorph [Cryp]
« Reply #3 on: October 12, 2008, 07:30:30 PM »
No problem, glad I could help.

Welcome to the forums.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 19.5.2378/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ WinPatrol+/