Results 1 to 7 of 7

Thread: W32Trojan.drop...

  1. #1
    lateralus Guest

    Default W32Trojan.drop...

    When I got home my mom said that zone alarm had flagged a file named something like this: "C:\Windows\VNF.\oe" as a trojan. She said that the name was "W32Trojan.drop" I think that it might have been a longer name and that she just didn't see it because of the window size.
    ZA quarantineed it and now I can't load windows. It is just a blank screen, no "welcome window" appears at all. I have managed to get into safe mode and backed-up all important files on the C:
    Is this a false alarm? What should I do? We have done absolutely nothing the last weeks that could have exposed us to any threat whatsoever.
    Thanks a lot for any response!


    Operating System:Windows XP Home Edition
    Software Version:7.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2

    Default Re: W32Trojan.drop...

    Read the thread below, false positive! Update your Anti-spyware signature immediately.

  3. #3
    lateralus Guest

    Default Re: W32Trojan.drop...

    Hi!

    Thanks a lot for the response!

    Is this a false alarm too?

    Win32.Trojan.Aavirus.1 in C:\WINDOWS\System32\Macromed\Flash\GetFlash.exe

    Thanks a lot in advance!

  4. #4
    fung Guest

    Default Re: W32Trojan.drop...

    I've just received a reply from ZA regarding removal of this trojan from their definitions
    - Result !!
    Fri, August 3, 2007 7:41 pm (BST)Subject:

    Tech Support Ticket: Anti-spyware removal ISSUE=582060 PROJ=4From:

    &quot;ZoneAlarm Technical Support&quot; **bleep**<hr>Hello Fung,
    Thank you for contacting ZoneAlarm Technical Support.

    I understand that you have a question about a virus on your system. I
    apologize for any inconvenience that this issue may be causing you.

    We have updated the anti-spyware definitions as of August 1 to ensure
    that we don't detect this file as malicious any longer. Ensure that
    ZoneAlarm is up to date by clicking the Update Now button on the
    Antivirus/Antispyware -&gt; Main tab.
    ......Thank you for choosing ZoneAlarm Security!

    Kelly
    Technical Support
    ZoneAlarm
    A Division of Check Point Software
    <hr>Original msg:

    Please see User Forum Thread titled ZA Anti Spyware thinks oem8.PNF is Trojan

    Should Trojan name Win32.Trojan.Dropper.Small.156 be removed from your Anti-Spyware definitions list so that it doesn t come up in the Scan Report ?? Or at least update the ZA webpage linked to warn users that it may cause problems if quarantining it before deciding if the files are needed, when users click on the More Info button.

  5. #5

    Default Re: W32Trojan.drop...

    On the file properties on this file, it is the Adobe Flash Player Updater 9.0 r16 and about 125K?

  6. #6
    Join Date
    Jun 2007
    Posts
    48

    Default Re: W32Trojan.Aavirus.1


    <blockquote><hr>lateralus wrote:
    Hi!

    Thanks a lot for the response!

    Is this a false alarm too?

    Win32.Trojan.Aavirus.1 in C:\WINDOWS\System32\Macromed\Flash\GetFlash.exe

    Thanks a lot in advance!
    <hr></blockquote>


    ZASS anti-virus scan just found this virus last night also. Not sure how ZASS let it through. I had no indication of anything wrong with my system but just thought it was time to do a manual scan, and it found this. I deleted it.

  7. #7
    lateralus Guest

    Default Re: W32Trojan.drop...

    Hi!

    Thanks for helping me out!

    It is the Adobe Flash Player Updater 7.0 r19.

    File version: 7.0.19.0
    Size: 92,0 Kb
    Signed by Macromedia, Inc

    Thanks again!

    Best regards!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •