« previous next »
Pages: [1]   Go Down

Author Topic: Possible unknown trojan...  (Read 2533 times)

0 Members and 1 Guest are viewing this topic.

BlueAchenar

  • Guest
Possible unknown trojan...
« on: June 15, 2004, 02:52:29 AM »
Hi,

I have a file named mswmpspatch.exe in my WINDOWS/SYSTEM32 directory, which was recently blocked by my firewall from accessing efnet.xs4all.nl:6667 and irc.prison.net:6667 (IRC servers). It also attached itself to the registry so it would run on startup.

Avast doesn't report anything about the file. I strongly believe it to be some kind of trojan, because I once had 1GB of data uploaded by a trojan which communicated with IRC servers... :\ Should I send it to you and if yes how?

Edit: Sorry if I posted in the wrong section of the forum...
« Last Edit: June 15, 2004, 02:55:49 AM by BlueAchenar »
Logged

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:Possible unknown trojan...
« Reply #1 on: June 15, 2004, 04:42:03 AM »
go to the user section of the virus chest and add the suspect file(s) there. Then Highlight them and choose the send to alwil icon (little envelope with a radioactive sign)

Logged
"People who are really serious about software should make their own hardware." - Alan Kay

softwareguy

  • Guest
Re:Possible unknown trojan...
« Reply #2 on: June 15, 2004, 05:05:16 AM »
Or simply compress + password zip it to virus@avast.com
Logged

BlueAchenar

  • Guest
Re:Possible unknown trojan...
« Reply #3 on: June 15, 2004, 12:06:24 PM »
Done! :) Thanks. I'm still trying to figure out which file dropped the trojan...
Logged
Pages: [1]   Go Up
« previous next »