BulkDomansChecker.exe - Virus or False Positive?

Hi All:

I had downloaded a file called BulkDomansChecker.exe, and used it for about a year before installing Avast. During that year, I did have Norton Antivirus installed and updated regularly.

Shortly after installing Avast, I went to use the program, and received an alert:

A Trojan Horse Was Found! No reason to panic, though.

File Name: BulkDomainsCheck.exe
Malware Name: Win32:Spyware-gen [Trj]
Type: Trojan Horse

At that time, though surprised to get the alert, I deleted the file.

I do miss using the program, though, and today I found it on a backup hard drive. Just to see, I scanned it again, and got the same alert.

I just went through the 10 Steps On What To Do When A Virus Is Discovered. Below is the result.

Any ideas on what I can or should do? Has anyone seen this program or have any experience with it?

I have not, to my knowledge, suffered any ill effects by using the program.

Thanks!

:slight_smile:

  1. File was originally detected on accessing the folder where the file resides. The file had been downloaded prior to installing Avast.

  2. File was downloaded from a website. URL of the website unknown at this time. Google search for file name returns no results.

  3. 3/8/2008

  4. BulkDomainsChecker.exe

  5. A Trojan Horse Was Found! No reason to panic, though.

File Name: BulkDomainsCheck.exe
Malware Name: Win32:Spyware-gen [Trj]
Type: Trojan Horse
VPS Version 090620-0, 06/20/2009

6A. Rescan produces the same result.

  1. Cannot scan with online scanner. File transfers at 0 length. Attempts to copy file to another location result in “File Access Denied” error. Possibly due to quarrantine by Avast?

  2. No information found in Virus Encyclopedia

  3. Insufficient information on which to base a decision.

  4. Any ideas?

[quote author=melissa_may1 link=topic=46270.msg388314#msg388314 date=1245539459
10. Any ideas?
[/quote]
Send the file to virustotal, then you will have a better idea, whether its a threat,or a false alarm

http://www.virustotal.com/

Try following these instructions: