PSW Mirpn, whackjob trojans

Discussion in 'malware problems & news' started by danane, Feb 1, 2003.

Thread Status:
Not open for further replies.
  1. danane

    danane Registered Member

    Joined:
    Feb 1, 2003
    Posts:
    2
    Hello,
    I've tried ut almost every updated anti trojans shareware out there
    as well as kasperky
    and none of them finds any trojans on my computer.
    But when I use
    Antiy Ghostbusters it detects some trojans that can be found on the internet and that apparently nobody knows :
    Psw. mirpn trojans (from Russia).
    as well as Whackjob trojan.
    How is it only Antiy is able to detect them and destroy them
    (when you pay for it).
    Many thanks. Dan
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    danane,

    These could well be false positives. In case you still have samples, did you submit them to antitrojan software companies?

    regards.

    paul
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi Danane,
    did you also try TDS available from www.diamondcs.com.au ? They have a trial version, which' database you have to update after the install to the latest and have another try scanning. (there is a dedicated forum here on the board for them)
    And their support@diamondcs.com.au will be most grateful for samples to tell you if those are false positives or real and have a cure for them in case of real nasties.
    Keep us updated about the results please!
     
  4. xor

    xor Guest

    Whackjob is known for false postives - Ghostbusters did include packed signatures for the detection of this :D

    [-xor-]
     
  5. danane

    danane Registered Member

    Joined:
    Feb 1, 2003
    Posts:
    2
    ,
    Antiy ghostbusters has no signatures for whackjob
    but trojancheck has.
    TDS-3 was helpless to find my Psw mirpn russian trojan.
    It is a trojan that gets imbricated in audio software.
    It gives its author access to all login passwords etc.
    Apparently only antiy Ghostbusters detects it.
    Other anti trojan logs should include its signature, too.
    Thanks for your care.
    danane. France
     
  6. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Bon apres-midi, danane.

    As stated before: in case you do have copies - please submit them ;).

    regards.

    paul
     
  7. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Having seen a screenshot of the detections, I'm not too worried. This looks like a big false alarm, on lots of commercial audio software. Please so send in an EXE sample if you would like it analysed :)
     
Loading...
Thread Status:
Not open for further replies.