ms32

Mcafee online scan found this file today with the detection as " generic downloader.bn" A google search suggests it’s a trojan/downloader. Also that it’s been around for almost a year.

The file was created June 25 2006. I did a thorough scan with avast! on July 08, nothing was detected. A right click scan of the file does not result in a detection. I tested avast with the eicar test, it seems to be working.

Should I submit a copy of this file to avast?

Ok, I’m off to find removal instructions.

Yes, although a trojan downloader in itself wouldn’t be considered a virus, what it may download may well be detected as one.

What was the file name, where was it found example (C:\windows\system32\infected-file-name.xxx) ?

The file name may well return better results on a google search.

File name “ms32.sys” located on c:\

Results of totalvirus and jotti are the same except for nod32

Once you have sent a sample to avast check out this link, it has more info and a removal link.

David

Thanks for the interest. I would really like to check out that link, however… :smiley: ;D :wink:

Oops http://virusinfo.prevx.com/viruscenter.asp?GRP=4776800021 ;D

Thanks David. I found that site yesterday, xp or 2000 is required.

I just moved the file to the chest. So far any thing that sounded alarms in my mind have not occurred.

Sometimes the brain is foggy ::). After much pondering ???, I remebered that a few weeks ago, webshield stopped a trojan and disconnected. I checked the log files and sure enough it was the same day and time as this file was created. So webshield did in fact pick up the trojan (win32:trojan-gen), just not the downloader part.

Oh well, no harm done. Thanks for your time and input.

Your welcome.