W32/Starter.A Trojan - What is it?

Discussion in 'NOD32 version 2 Forum' started by svan, Feb 22, 2004.

Thread Status:
Not open for further replies.
  1. svan

    svan Registered Member

    Joined:
    Oct 6, 2003
    Posts:
    4
    Location:
    Australia
    Hi All,

    Can anyone shed any light on what this virus is? NOD picked it up but I can't find any info about it anywhere on the net. Symantec security response online scanner didn't detect it. The actual file in question is C:\WINNT\autoload.exe on Win2000 Pro. The pattern update for it was included in NOD from 10 Feb 04 - it seems strange that the "others" would be that far behind with there detection.

    Thanks.
     
    svan, Feb 22, 2004
    #1
  2. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    it's a spyware/adware downloader. It comes with diferent names for the downloader

    autoload.exe can be and very often is a genuine file that is used to autorun html files on a cd

    NOD is detecting it because it can and has been used to download infected html files that are carrying other payloads
     
    dvk01, Feb 23, 2004
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...