Some Advise(please)*Red Highlight

Discussion in 'NOD32 version 2 Forum' started by hayc59, Oct 20, 2003.

Thread Status:
Not open for further replies.
  1. hayc59

    hayc59 Guest

    Scan performed at: 10/20/03 19:29:53 PM                  
    Scanning Log                  
    NOD32 version 1.537 (20031020)                  
    Operating memory - is OK                  
                      
    date: 20.10.2003 time: 19:29:55                  
    Scanned disks, directories and files: C:                  
    C:\WINDOWS\WIN386.SWP - error opening (file locked) [4]                  
    C:\WINDOWS\TEMP\JETCFC8.TMP - error opening (file locked) [4]                  
    C:\Program Files\WinRAR\Default.SFX - Win32/IRC.SdBot.EC trojan                  
    number of files scanned: 40156                  
    number of viruses found: 1                  
    time of termination: 19:34:15 total scanning time: 260 sec (00:04:20)                  
                      
    Notes:                  
    [4] File cannot be open. It is being exclusively used by another application or operating system.                  
                      
     
  2. hayc59

    hayc59 Guest

    scanning with TrojanHunter/Ad-Aware
    comes up clean??
    any help would be nice.
    unless its a falsey :D
     
  3. JPM

    JPM Registered Member

    Joined:
    Feb 10, 2002
    Posts:
    76
    Location:
    Las Vegas, NV
    I have seen a couple of people with this after todays update. I scanned my system with NOD32 and I show it as well on two files that I know are clean. I would say this is a false positive, as I also scanned with KAV, TDS-3 and have BOClean running resident and they show nothing out of the ordinary :) I think it will be fixed soon by ESET.
     
  4. Q Section

    Q Section Registered Member

    Joined:
    Feb 5, 2003
    Posts:
    771
    Location:
    Headquarters - London & Field Offices -Worldwide
    Hello hayc59

    Looks like you have picked up a good one - although the threat level is rated low. This is a Backdoor trojan. BTW - you do run NOD32 do you not? This is found in the update for 20OCT03 NOD32 v.1.537.

    This page has some information regarding sdbot code:http://www.theregister.co.uk/content/56/31480.html

    Virus List has some more info here:
    www.viruslist.com/eng/viruslist.html?id=51544

    Best wishes and cleaning :)
     

    Attached Files:

    • NOD.gif
      NOD.gif
      File size:
      7.7 KB
      Views:
      512
  5. sig

    sig Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    716
    As previously noted, given the number of similar reports here today after today's update, with other scanners showing OK, it may be a false positive. File appears to have been sent to ESET so perhaps tomorrow's update will correct it. Just a guess.
     
  6. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,875
    Location:
    New England
Thread Status:
Not open for further replies.