Trojan-Downloader.Win32.NSIS.y

[davisdrafting]

Did a system scan at KASPERSKY, said I have; Trojan-Downloader.Win32.NSIS.y

Wednesday, January 13, 2010

Operating system: Microsoft Windows XP Professional x64 Edition Service Pack 2 (build 3790)

Kaspersky Online Scanner version: 7.0.26.13

Last database update: Wednesday, January 13, 2010 21:51:38

Records in database: 3310741

Scan settings

scan using the following database extended

Scan archives yes

Scan e-mail databases yes

Scan area My Computer

C:\

E:\

Scan statistics

Objects scanned 72378

Threats found 1

Infected objects found 2

Suspicious objects found 0

Scan duration 02:09:22

File name Threat Threats count

C:\Documents and Settings\Administrator\Local Settings\Temp\EULA.exe Infected: Trojan-Downloader.Win32.NSIS.y 1

C:\Documents and Settings\Administrator\My Documents\Downloads\WINDVD Platinum 8.0 Build 06.111\WinDVD8.exe Infected: Trojan-Downloader.Win32.NSIS.y 1

[AdvancedSetup]

Try uploading both of those files to http://www.virustotal.com/ and have them scan the files as well.

[davisdrafting]

EULA.exe

Antivirus Version Last Update Result

a-squared 4.5.0.48 2010.01.14 Trojan-Downloader.Win32.NSIS!IK

AhnLab-V3 5.0.0.2 2010.01.13 -

AntiVir 7.9.1.134 2010.01.13 DR/Dldr.NSIS.Y

Antiy-AVL 2.0.3.7 2010.01.12 -

Authentium 5.2.0.5 2010.01.13 W32/DownloaderX.CUF

Avast 4.8.1351.0 2010.01.14 -

AVG 9.0.0.725 2010.01.14 -

BitDefender 7.2 2010.01.14 -

CAT-QuickHeal 10.00 2010.01.13 -

ClamAV 0.94.1 2010.01.13 -

Comodo 3574 2010.01.14 TrojWare.Win32.Downloader.Agent.~ID

DrWeb 5.0.1.12222 2010.01.14 -

eSafe 7.0.17.0 2010.01.13 -

eTrust-Vet 35.2.7235 2010.01.13 -

F-Prot 4.5.1.85 2010.01.13 W32/DownloaderX.CUF

F-Secure 9.0.15370.0 2010.01.14 -

Fortinet 4.0.14.0 2010.01.14 -

GData 19 2010.01.14 -

Ikarus T3.1.1.80.0 2010.01.14 Trojan-Downloader.Win32.NSIS

Jiangmin 13.0.900 2010.01.13 -

K7AntiVirus 7.10.946 2010.01.13 Trojan-Downloader.Win32.NSIS.y

Kaspersky 7.0.0.125 2010.01.14 Trojan-Downloader.Win32.NSIS.y

McAfee 5860 2010.01.13 Generic Downloader.x!bqv

McAfee+Artemis 5860 2010.01.13 Generic Downloader.x!bqv

McAfee-GW-Edition 6.8.5 2010.01.13 Trojan.Dropper.Dldr.NSIS.Y

Microsoft 1.5302 2010.01.14 -

NOD32 4769 2010.01.13 -

Norman 6.04.03 2010.01.13 Downloader.XJB

nProtect 2009.1.8.0 2010.01.13 -

Panda 10.0.2.2 2010.01.13 Trj/CI.A

PCTools 7.0.3.5 2010.01.14 -

Prevx 3.0 2010.01.14 Medium Risk Malware

Rising 22.30.03.01 2010.01.14 -

Sophos 4.49.0 2010.01.14 -

Sunbelt 3.2.1858.2 2010.01.14 Trojan.Win32.Generic!BT

Symantec 20091.2.0.41 2010.01.14 -

TheHacker 6.5.0.3.149 2010.01.14 -

TrendMicro 9.120.0.1004 2010.01.13 -

VBA32 3.12.12.1 2010.01.14 Trojan-Downloader.Win32.NSIS.y

ViRobot 2010.1.13.2134 2010.01.13 -

VirusBuster 5.0.21.0 2010.01.13 -

C:\Documents and Settings\Administrator\My Documents\Downloads\WINDVD Platinum 8.0 Build 06.111\WinDVD8.exe

Could not scan, to big of a file it said.

I installed winDVD a while ago, ill delete the file in my downloads folder though.

What should I do about the EULA.exe?

[AdvancedSetup]

Delete it. If that many AV find it bad then I'd have to agree. If only a couple then it would be possibly debatable

[davisdrafting]

Delete it. If that many AV find it bad then I'd have to agree. If only a couple then it would be possibly debatable

I find it not so reassuring when they don

[AdvancedSetup]

Because every Company is a private company and can name them anything they want to. There is no single authoritative repository or control database for names. With hundreds of new ones that show up daily it would also be a daunting task for a single repository to keep up.