Win32:Dropper-gen [Drp]

Avast Business Avast Endpoint Protection
1

Hi Avast,

Our company uses the Avast Endpoint Protection Suite Plus and we’re having some issues with it. For some reason, legitimate programs on our machines started reporting they were infected with malware. It started a couple of months ago wherein almost all of our workstations seems to be infected with Win32:Dropper-gen [Drp] Trojan based on the Avast logs and reports. In our case, it’s adobe.exe, acrobat.exe, A00xxxxx and winsever.exe that get infected. Our workstations are mostly WinXP Pro x86.

Please advise if this is false-positive because we are going crazy on how to mitigate this outbreak. We have over a hundred computers in our network and almost 80% were reported infected.

Any assistance is greatly appreciated.
Thank you Avast.

2

Hi,
are you sure that the files you’ve listed are not infected with that trojan?
Have you tested the infected files on virustotal?
https://www.virustotal.com/

3

Hello DZSP21,
like giogio said test some file with online scan at https://www.virustotal.com or http://virusscan.jotti.org/en