Virus-like writing to file?

Discussion in 'malware problems & news' started by Douglas, May 13, 2003.

Thread Status:
Not open for further replies.
  1. Douglas

    Douglas Guest

    I received an alert from my av (DrWeb) after an update;
    "virus-like writing to a file detected: windows\system\dplaysvr".
    I feel certain this was a false alarm, but my questions are:
    1) Why would I get this alert, and
    2) Am I being told that dplaysvr.exe is doing the writing or is something writing to dplaysvr.exe.

    Regards,
    Douglas
     
  2. wizard

    wizard Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    818
    Location:
    Europe - Germany - Duesseldorf
    Just a guess: Maybe the file tries to save data in its own executable. I suggest you send the file to the support of DrWeb for investigation.

    wizard
     
  3. Douglas

    Douglas Guest

    Thank you wizard. I will do as you suggest.

    Regards,
    Douglas
     
  4. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Yep I wouldnt be too worried because its just after an update. The directplay server component file mentioned is a part of DirectX too, so probably they updated some heuristic detections, and need to examine the activities of that file more closely ;)
     
  5. Douglas

    Douglas Guest

    Thanks Gavin.
    That pretty much explains it to me. :)

    Regards,
    Douglas
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.