Results 1 to 8 of 8

Thread: Trojan-Dropper

  1. #1
    rimmer Guest

    Default Trojan-Dropper

    Hi,
    just done an A/V scan and came up with Trojan-Dropper....anyone know about this one and what it does?

    ZA says it was quarantined..so is it now completely harmless?
    or does it need routing out?
    Any help or advice would be much appreciated.
    Rimmer.

    Operating System:Windows XP Pro
    Software Version:7.0
    Product Name:ZoneAlarm Antivirus

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Trojan-Dropper

    Hi!update your AV, reboot in SAFE MODE and do another scan (you need to run ZA manually, ZA firewall will not be functional but AV will work)just to be sure its gone.Can you copy here the name and location of the dropper? It may be just a dead entry in temp folder or internet cache.Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    rimmer Guest

    Default Re: Trojan-Dropper

    Hi Fax,

    started in safe mode and did a AV scan as you said.
    Nothing came up this time.
    The location of the dropper was c:\windows\$hf_mis$\kb890859\sb2qfe\ntkrnlpa.exe
    Do you think I need to take any further action?
    Regards Rimmer

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Trojan-Dropper

    uuuhm...was this the only file found?I can't find any information on this malware, the name correspond to a legit MS file.What was the exact detection? Dropper what?If you have a backup of your system I would restore the file and upload it to www.virustotal.com to check if it is a false positive.Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    rimmer Guest

    Default Re: Trojan-Dropper

    just one file, and only showed part of it.
    Trojan-Dropper.Wi......... thats all I have.
    Rimmer.

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Trojan-Dropper

    Hi!well if everything works fine leave it like this...Otherwise you can always check with "virustotal" (after restoring thefile) if its a true malware or just a false positive.Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  7. #7
    rimmer Guest

    Default Re: Trojan-Dropper

    Many thanks for your help.

    Rimmer

  8. #8
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,283

    Default Re: Trojan-Dropper

    You're welcome! :8}Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •