Help. [1].exe Trojan horse detected?

Discussion in 'malware problems & news' started by chip718, Apr 22, 2005.

Thread Status:
Not open for further replies.
  1. chip718

    chip718 Registered Member

    Joined:
    Jan 13, 2004
    Posts:
    60
    Hello. My AVG just gave me a warning that I have winupdate4181470[1].exe Trojan. I thought it was strange since I didn't download anything. I had AVG Heal it and now it is in my Vault. Since the Trojan was in my Temp Folder I used Window Washer to delete all my temp files, but when WW was doing its thing I got a warning that I had winupdate49576881[1].exe. Both of these were found in my Temp Internet Folder. AVG labeled them as Trojan Horse Drop.Small.18.av

    Does anyone know anything about these? Should I delete the from my vault? I am using XP Home and a dial-up. Thanks.
     
  2. TopperID

    TopperID Registered Member

    Joined:
    Oct 1, 2004
    Posts:
    1,527
    Location:
    London
    Dropper.small is a large family of Trojans, but I can't find any info on the variant you have. They are Trojan Droppers see here:- http://www.viruslist.com/en/viruses/encyclopedia?chapter=152540521#droppers

    I can also say that the name winupdate.exe is often used by malware, but again I know nothing of your precise version.

    You might have picked this up on a 'drive by basis' while surfing. It could have come in via your Temp Internet files - but you can get the file path from AVG. I would just delete it from your vault.

    Probably best to give yourself an online scan to ensure you are clean:- http://support.f-secure.com/enu/home/ols.shtml

    http://www.pandasoftware.com/activescan/com/activescan_principal.htm
     
Loading...
Thread Status:
Not open for further replies.