mcbrhook.dll (Win32:Trojan-gen {Other}

Viruses and worms
1

I was at a site called www.osx-e.com, a site for Mac OS X Emulation, and happen to see this McBar. According to what the designer said " McBar gives Windows users the usability of Apple Macintosh’s window menu. It is created not to just mimic the Mac’s features, but to increase the whole usability of Windows system." I thought to myself that it would be nice to have so I tried to download it and Avast! warned me that a virus was detected and I aborted the connection and canceled the download. Really, it’s a Trojan.

2

To start with there are a number of comments on the McBar page that mention the tool being detected as a trojan, despite the protestations of the

3

I just didn’t want to take the chances.

4

Whilst this may well be correct that the mcbrhook.dll is not malicious, but with 18 of 32 scanners detecting it I would have to question my need for this type of tool.

File mcbrhook.dll received on 10.22.2007 18:03:02 (CET) Result: 18/32 (56.25%)

Antivirus Version Last Update Result
AhnLab-V3 2007.10.22.0 2007.10.22 -
AntiVir 7.6.0.27 2007.10.22 TR/Spy.Delf.CB.4
Authentium 4.93.8 2007.10.22 W32/Trojan.OSJ
Avast 4.7.1051.0 2007.10.21 Win32:Trojan-gen {Other}
AVG 7.5.0.488 2007.10.22 -
BitDefender 7.2 2007.10.22 Trojan.Spy.Delf.CB
CAT-QuickHeal 9.00 2007.10.22 -
ClamAV 0.91.2 2007.10.22 Trojan.PWS.Wexd
DrWeb 4.44.0.09170 2007.10.22 -
eSafe 7.0.15.0 2007.10.22 Win32.Delf.cb
eTrust-Vet 31.2.5230 2007.10.22 Win32/VMalum.ANCA
Ewido 4.0 2007.10.22 -
FileAdvisor 1 2007.10.22 -
Fortinet 3.11.0.0 2007.10.19 Spy/Delf
F-Prot 4.3.2.48 2007.10.22 W32/Trojan.OSJ
F-Secure 6.70.13030.0 2007.10.22 Trojan-Spy.Win32.Delf.cb
Ikarus T3.1.1.12 2007.10.22 Trojan-Spy.Win32.Delf.CB
Kaspersky 7.0.0.125 2007.10.22 Trojan-Spy.Win32.Delf.cb
McAfee 5145 2007.10.19 -
Microsoft 1.2908 2007.10.22 -
NOD32v2 2607 2007.10.22 probably a variant of Win32/Spy.Delf
Norman 5.80.02 2007.10.22 -
Panda 9.0.0.4 2007.10.21 Trj/Downloader.MDW
Prevx1 V2 2007.10.22 -
Rising 19.46.02.00 2007.10.22 Trojan.Spy.Delf.beo
Sophos 4.22.0 2007.10.22 Mal/Generic-A
Sunbelt 2.2.907.0 2007.10.20 -
Symantec 10 2007.10.22 -
TheHacker 6.2.9.104 2007.10.22 -
VBA32 3.12.2.4 2007.10.22 Trojan-Spy.Win32.Delf.cb
VirusBuster 4.3.26:9 2007.10.22 -
Webwasher-Gateway 6.0.1 2007.10.22 Trojan.Spy.Delf.CB.4