Could this be a false positive? Kuluoz.A

[ToDoStaff]

MS Security Essentials has several times over the past week detected TrojanDownloader:Win32/Kuluoz.A; however MWB has not, nor ESET. Security Essentials shows action tacken as REMOVED. But then the threat is detected again.

Can't find anything on this virus name in your forum. Treand Micro reports it's an Aliase for TROJ_KRYPTIK.LJC

I'm not sure if real theat or if I should proceed with your virus instruction, and greatly appreciate your direction.

Kind regards,

Valarie

ToDo Institute

a 501©(3) educational nonprofit

[Firefox]

Hello and

If you believe this is a new infection or one that should be detected by Malwarebytes, you can aways submit the file to the Research Center --> Right HERE

They will analyze the file and deem weather it should be added or not.

[ToDoStaff]

If you believe this is a new infection or one that should be detected by Malwarebytes, you can aways submit the file to the Research Center --> Right HERE

They will analyze the file and deem weather it should be added or not.

I don't believe as I have no clue if this is a new infection. That's why I am asking the experienced for their guidance/direction on this matter. I'm an office manager for a small non-profit that has zero tech support. I'm willing to do what the forum admin suggest. So hopefully they will reply to me. Thanks.

[Maurice Naggar]

Hello Todostaff,

TrojanDownloader:Win32/Kuluoz.A is Microsoft's name/classification for a recently identified trojan. REF http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=TrojanDownloader%3aWin32%2fKuluoz.A

This threat is classified as a trojan downloader. A downloader trojan accesses remote websites in an attempt to download and install malicious or potentially unwanted software. Some downloader trojans target specific files on remote websites while others may target a specific URL that points to a website containing exploit code that may allow the site to automatically download and execute software or malicious code on vulnerable systems. This threat is detected by the Microsoft antivirus engine.

If any of your systems has this indication, disconnet it from the local network. And then follow-up to clean this system. If your organization has a recent backup of this system, take steps to restore it from a known good backup.

We don't work on malware removal in this part of the forums.

If you need guided expert help, please read and follow the directions here, skipping any steps you are unable to complete. Then create a NEW topic here.

One of the expert helpers there will give you one on one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

If you prefer to be assisted via email you may contact Consumer Support and one of our support staff members will assist you directly.

If you are a corporate, business, educational, government or non-profit customer then please contact Corporate Support and include full contact details along with your Reference # when you do to ensure that you receive prompt assistance.

Edited April 30, 2012 by Maurice Naggar