Re: Possible virus? mpg4ds32.ax

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 09/28/05 

Date: Wed, 28 Sep 2005 10:50:21 -0400

From: "Rain Man" <RainMan@discussions.microsoft.com>

| I was updating IPView Software on my machine which is for my Dink DCS900W
| camera. The sofware attempted to copy mpg4ds32.ax from C:\windows to
| C:\windows\system32\. When looked at the file properties I noticed that it
| had the following information:
| Description: Microcrap MPEG-4 Video Decompressor
| Copyright: Copyright (C) Microcrap Corp. 1996-1999
| Company: Microcrap Corporation
| File Version: 4.1.00.3917
| Internal Name: mpg4ds32.ax
| Language: English (United States)
| Original File name: mpg4ds32.ax
| Product Name: Microcrap MPEG-4 Video Decompressor
| Product Version: 4.1.00.3917
|
| This seems highly suspicious and possibly viral. Note: McAfee does not show
| it to be a virus. Nonetheless I did not allow my current file to be
| overwritten. The question is has anyone else heard of this and how do I
| submit this to Microsoft for analysis or would they even care?
|

Please submit a sample of "mpg4ds32.ax " to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

When you get the report, please post back the exact results. 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm