FP on old SpyCop file (not very important)

Discussion in 'NOD32 version 2 Forum' started by FanJ, Jul 25, 2007.

Thread Status:
Not open for further replies.
  1. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    NOD32 gave a FP on an old file belonging to SpyCop.
    I had the file as attachment (zipped etc) in my Outlook Express while I had sent it to another AV as FP about a year ago.
    Today NOD32 flagged it as infected.
    Copied and unzipped the file to another directory.
    Report:
    D:\Tijdelijk_2\welcome.exe - probably a variant of Win32/Agent trojan

    The file D:\Tijdelijk_2\welcome.exe has the following Checksum(s)
    MD5 - C19BA30D6CEF0165DA23BCB0DB88F5E0

    Marcos, I'll try to send you the file in private ;)

    Best regards, Jan.
     
  2. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Well, I have scanned the file at VirusTotal and lots of scanners were giving a warning.
    Why NOD32 suddenly gave a warning while it didn't before, I don't know.

    Anyway, it was an old file of SpyCop; so why bother anymore about it; I'll delete it.

    So, I've just scanned the latest SpyCop file welcome.exe and (except for CAT-QuickHeal and eSafe) all are saying it is clean.

    For those who don't know SpyCop:
    When there is a signature update for SpyCop, it is the file welcome.exe that is updated.
     
  3. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    This one will be fixed shortly, I thought it had already been.
     
  4. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Thank you Marcos !!! Much appreciated :thumb:

    Best regards,
    Jan.
     
  5. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Confirmed: fixed with defs 2424 (20070726)

    Thanks ESET !!!
     
Thread Status:
Not open for further replies.