Trojan in real program?

Discussion in 'NOD32 version 2 Forum' started by scanner, Sep 21, 2005.

Thread Status:
Not open for further replies.
  1. scanner

    scanner Guest

    Hi, Im using Nod32 v2.5, and was doing a scan today, and a program i had installed came up a threat.

    this is what it reported:

    21/09/2005 18:03:57 PM AMON
    C:\Program Files\XYZSoftware\SWFSoundAutomate.
    probably a variant of Win32/Spy.Banker trojan

    i dowloaded the software from here:
    http://www.xyz-software.com/default.asp?PAG00_CODE=PRDDET&MMM00_ITEM_CODE=12235

    i have already submitted it for analysis, but what do you hink, its safe to keep using it in the mean time, as its already installed and has been used.

    thanks.
     
  2. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    Check it at VirusTotal or Jotti.
     
  3. scanner

    scanner Guest

    thanks, just sent to both, VirusTotal reports Kaspersky(Trojan.Win32.Crypt.j), NOD32(probably a variant of Win32/Spy.Banker) and fortinet(suspicious) detect it, but Jotti says only kaspersky detects.

    oh well, might just have to uninstall it.
     
  4. scanner

    scanner Guest

    oh, can i just ask, why wehn using virustotal website in firefox, i get a popup window saying 'a script has stopped responding, continue or stop' and no matter what i choose the box doesnt go away until i close firefox.
     
Thread Status:
Not open for further replies.