Possible unknown trojan...

Avast Free Antivirus / Premium Security
1

Hi,

I have a file named mswmpspatch.exe in my WINDOWS/SYSTEM32 directory, which was recently blocked by my firewall from accessing efnet.xs4all.nl:6667 and irc.prison.net:6667 (IRC servers). It also attached itself to the registry so it would run on startup.

Avast doesn’t report anything about the file. I strongly believe it to be some kind of trojan, because I once had 1GB of data uploaded by a trojan which communicated with IRC servers… :\ Should I send it to you and if yes how?

Edit: Sorry if I posted in the wrong section of the forum…

2

go to the user section of the virus chest and add the suspect file(s) there. Then Highlight them and choose the send to alwil icon (little envelope with a radioactive sign)

3

Or simply compress + password zip it to virus@avast.com

4

Done! :slight_smile: Thanks. I’m still trying to figure out which file dropped the trojan…