W32/Starter.A Trojan - What is it?

Discussion in 'NOD32 version 2 Forum' started by svan, Feb 22, 2004.

Thread Status:
Not open for further replies.
  1. svan

    svan Registered Member

    Joined:
    Oct 6, 2003
    Posts:
    4
    Location:
    Australia
    Hi All,

    Can anyone shed any light on what this virus is? NOD picked it up but I can't find any info about it anywhere on the net. Symantec security response online scanner didn't detect it. The actual file in question is C:\WINNT\autoload.exe on Win2000 Pro. The pattern update for it was included in NOD from 10 Feb 04 - it seems strange that the "others" would be that far behind with there detection.

    Thanks.
     
  2. dvk01

    dvk01 Global Moderator

    Joined:
    Oct 9, 2003
    Posts:
    3,131
    Location:
    Loughton, Essex. UK
    it's a spyware/adware downloader. It comes with diferent names for the downloader

    autoload.exe can be and very often is a genuine file that is used to autorun html files on a cd

    NOD is detecting it because it can and has been used to download infected html files that are carrying other payloads
     
Thread Status:
Not open for further replies.