|
Posted by Saint Pancreas on February 26, 2007, 6:54 am
If you were Registered and logged in, you could reply and use other advanced thread options
David,
I have Re Downloaded this file onto an empty CD to re create the problem
which is in the Uninstal section of the App.
Hope this helps
You will no doubt see that Bit Defender has found the same result as
BULLGUARD, KASOERSKY has also found someting Complete scanning result of
"PrettyMay-setup.exe", received in VirusTotal at 02.26.2007, 12:27:59 (CET).
When you say that this can be potentially used as Malware.Does that mean
[and please forgive my ignorance] that a Hacker could get into this and
Distribute it in some kind of processed form?
Regards
Mike
Antivirus Version Update Result
AntiVir 7.3.1.38 02.26.2007 no virus found Authentium 4.93.8 02.25.2007 no
virus found Avast 4.7.936.0 02.26.2007 no virus found AVG 386 02.25.2007 no
virus found BitDefender 7.2 02.26.2007 Trojan.Hacktool.Prockill.A
CAT-QuickHeal 9.00 02.24.2007 no virus found ClamAV devel-20060426
02.26.2007 no virus found DrWeb 4.33 02.26.2007 no virus found eSafe
7.0.14.0 02.25.2007 no virus found eTrust-Vet 30.4.3434 02.26.2007 no virus
found Ewido 4.0 02.26.2007 no virus found FileAdvisor 1 02.26.2007 no virus
found Fortinet 2.85.0.0 02.26.2007 no virus found F-Prot 4.3.1.45 02.25.2007
no virus found F-Secure 6.70.13030.0 02.26.2007 no virus found Ikarus
T3.1.0.31 02.26.2007 Trojan-Downloader Kaspersky 4.0.2.24 02.26.2007
not-a-virus:RiskTool.Win32.PsKill.q
McAfee 4970 02.23.2007 no virus found
Microsoft 1.2204 02.26.2007 no virus found
NOD32v2 2080 02.25.2007 no virus found Norman 5.80.02 02.26.2007 no virus
found Panda 9.0.0.4 02.26.2007 no virus found
Prevx1 V2 02.26.2007 no virus found
Sophos 4.14.0 02.24.2007 no virus found Sunbelt 2.2.907.0 02.24.2007 no
virus found Symantec 10 02.26.2007 no virus found TheHacker 6.1.6.065
02.26.2007 no virus found UNA 1.83 02.23.2007 no virus found
VBA32 3.11.2 02.25.2007 no virus found VirusBuster 4.3.19:9 02.25.2007 no
virus found
Aditional Information
File size: 3878680 bytes
MD5: 48e50b826c3cc5a0895321c6f0f8dd98
SHA1: f730ec9fe13443dc1d10fc0848b428ae5ee9130d
packers: BINARYRES, UPX, UPX
VirusTotal is a free service offered by Hispasec Sistemas. There are no
guarantees about the availability and continuity of this service. Although
the detection rate afforded by the use of multiple antivirus engines is far
superior to that offered by just one product, these results DO NOT guarantee
the harmlessness of a file. Currently, there is not any solution that offers
a 100% effectiveness rate for detecting viruses and malware.
> Go to: Home Contactar En Español
--------------------------------------------------------------------------------
www.virustotal.com :: ©Hispasec Sistemas 2004-07:: e-mail
info@virustotal.com
>
> | I would like to thank you all for your helpful advice.
> | I did submit the suspect file to the links that you suggested and
> | sure enough one or two out of the many files in their Databases DID
> | recognise the exact virus reported in BULLGUARD.
> | I also reported these findings from BULLGUARD directly to the Vendor
> | who replied with a rather short and dismissive Mail advising me to
> | get rid of my Anti Virus Software immediately.
> | The problem as BULLGUARD reported lurked in the Uninstal.exe
> | component of the App which I Deleted using 'SAFE MODE' and then Re
> Boooted.
> | The Trojan was then identifed to be in the System Files area. I
> | closed the RESTORE featue in XP, cleared everything out using BE
> | CLEAN, Re Scanned and at last the Preditor was Deleted Fortunately,
> | the App still functions ok and if a complete Un Install is needed at
> | any time the ADD/REMOVE Pro will do the job.
> |
> | According to my reseach into this nasty lttle Bastard:
> | "Trojan.Hacktool.Prockill.A" can be quite destructive
> |
>
> I again want to stress that Prockill.A kis NOT a virus it is a
> utilitity in the calss of "potentially unwanted programs" becuase in
> itself it is not malicious but it may be used maliciosly.
>
> I also stated "please post back the exact results." when I mentioned
> sun\bmitting to Virus Total. I did NOT see that Virus Total report in your
> reply.
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>I Downloaded a SKYPE Plug-In yesterday which is a Call Rercoder which Iuse
> for my business and it operates brilliantly BUT on doing a File Scan on
> BULLGUARD Ver 6.1 a Trojan called: Trojan.Hacktool.Prockill.A was found.
>
> BULLGUARD recommend uninstallation of the Program but having paid $24.95
> for
> this over the NET I am reluctant to Un Install.
>
> Is there any kind soul out there that could point me in the direction of
> an
> App that will kill this Bloddy thing off..Please
>
> Sym
>
>
| 
XML site map