Win32:Banload-AJY [Trj] in TeaTimer process?

Viruses and worms
1

One of our PCs is running TeaTimer from the “Spybot - Search & Destroy” package. As of a few days ago, Avast! is detecting “Win32:Banload-AJY [trj]” in the running process “teatimer.exe”. Avast! does not detect any virus in the executable file teatimer.exe, though. And I uploaded the file to VirusTotal and got only one positive. All the rest of the scanners said “no virus”.

Has anyone else seens this? I’m hoping it’s a false positive and I can ignore it, but I’m also concerned that the machine in question might be rooted.

Thanks, Ben

2

Hope they correct this false positive soon as they usually does.

3

I find this a strange occurrence since I also use Spybot with Teatimer active. I ran an avast scan earlier today (about an hour ago) without the same detection listed above.