alcmtre.exe FP, Realtek Azalia Audio Event Monitor

[Amethyst]

Developer's log:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4570

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

09/09/2010 7:05:55 AM

mbam-log-2010-09-09 (07-05-55).txt

Scan type: Quick scan

Objects scanned: 175057

Time elapsed: 17 minute(s), 1 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\ALCMTR.EXE (Trojan.Refroso.Gen) -> No action taken. [8F9E1CA5A6BDC2184E8AA20A36A1F8C0]

(Sorry, I just woke up to news of this and hadn't updated MWB yet. Also haven't had enough coffee yet! )

Virus total results:

Antivirus Version Last Update Result

AhnLab-V3 2010.09.09.01 2010.09.09 -

AntiVir 8.2.4.50 2010.09.09 -

Antiy-AVL 2.0.3.7 2010.09.09 -

Authentium 5.2.0.5 2010.09.08 -

Avast 4.8.1351.0 2010.09.09 -

Avast5 5.0.594.0 2010.09.09 -

AVG 9.0.0.851 2010.09.09 -

BitDefender 7.2 2010.09.09 -

CAT-QuickHeal 11.00 2010.09.09 -

ClamAV 0.96.2.0-git 2010.09.09 -

Comodo 6024 2010.09.09 -

DrWeb 5.0.2.03300 2010.09.09 -

Emsisoft 5.0.0.37 2010.09.09 -

eSafe 7.0.17.0 2010.09.07 -

eTrust-Vet 36.1.7844 2010.09.09 -

F-Prot 4.6.1.107 2010.09.01 -

F-Secure 9.0.15370.0 2010.09.09 -

Fortinet 4.1.143.0 2010.09.09 -

GData 21 2010.09.09 -

Ikarus T3.1.1.88.0 2010.09.09 -

Jiangmin 13.0.900 2010.09.09 -

K7AntiVirus 9.63.2470 2010.09.08 -

Kaspersky 7.0.0.125 2010.09.09 -

McAfee 5.400.0.1158 2010.09.09 -

McAfee-GW-Edition 2010.1B 2010.09.09 Heuristic.LooksLike.Worm.Agent.I

Microsoft 1.6103 2010.09.09 -

NOD32 5437 2010.09.09 -

Norman 6.06.05 2010.09.09 -

nProtect 2010-09-09.03 2010.09.09 -

Panda 10.0.2.7 2010.09.08 -

PCTools 7.0.3.5 2010.09.09 -

Prevx 3.0 2010.09.09 -

Rising 22.64.03.01 2010.09.09 -

Sophos 4.57.0 2010.09.09 -

Sunbelt 6850 2010.09.09 -

SUPERAntiSpyware 4.40.0.1006 2010.09.09 -

Symantec 20101.1.1.7 2010.09.09 -

TheHacker 6.7.0.0.012 2010.09.09 -

TrendMicro 9.120.0.1004 2010.09.09 -

TrendMicro-HouseCall 9.120.0.1004 2010.09.09 -

VBA32 3.12.14.0 2010.09.08 -

ViRobot 2010.9.8.4031 2010.09.09 -

VirusBuster 12.64.24.0 2010.09.08 -

Additional information

Show all

MD5 : 8b4cbba1ea526830c7f97e7822e2493a

SHA1 : e519f493e42694c564aaa347745bab035bbcb3d9

SHA256: 1dfd05b1c0050db44f5b4293e5574bfc292af804a63fc0a70131bb498c326977

The file is Realtek Azalia Audio Event Monitor, it's been on the computer since 2005.

[nosirrah]

You are 12 updates behind, please update and scan again.

[Amethyst]

You are 12 updates behind, please update and scan again.

Yup, sorry about that, I should know better by now. This isn't detected after an update. Sorry to bother you. (Is there a blushing smilie?) I removed the attachment.