Virus-like writing to file?

Discussion in 'malware problems & news' started by Douglas, May 13, 2003.

Thread Status:
Not open for further replies.
  1. Douglas

    Douglas Guest

    I received an alert from my av (DrWeb) after an update;
    "virus-like writing to a file detected: windows\system\dplaysvr".
    I feel certain this was a false alarm, but my questions are:
    1) Why would I get this alert, and
    2) Am I being told that dplaysvr.exe is doing the writing or is something writing to dplaysvr.exe.

    Regards,
    Douglas
     
  2. wizard

    wizard Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    818
    Location:
    Europe - Germany - Duesseldorf
    Just a guess: Maybe the file tries to save data in its own executable. I suggest you send the file to the support of DrWeb for investigation.

    wizard
     
  3. Douglas

    Douglas Guest

    Thank you wizard. I will do as you suggest.

    Regards,
    Douglas
     
  4. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Yep I wouldnt be too worried because its just after an update. The directplay server component file mentioned is a part of DirectX too, so probably they updated some heuristic detections, and need to examine the activities of that file more closely ;)
     
  5. Douglas

    Douglas Guest

    Thanks Gavin.
    That pretty much explains it to me. :)

    Regards,
    Douglas
     
Loading...
Thread Status:
Not open for further replies.