Re: Trojan horse Downloader.Agent.2.F
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/29/04
- Next message: Steven L Umbach: "Re: Problems with giving the Domain Users group access to folders"
- Previous message: Steven L Umbach: "Re: HKLM\SAM\SAM\"
- In reply to: Jan den Hollander: "Trojan horse Downloader.Agent.2.F"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 29 Jul 2004 03:35:57 GMT
I see on my computer a mciwave.dll and mciwave.drv no .exe. If files are critical to
your operating system you can restore them with System File Checker as in sfc
/scannow. It looks like the legitimate files are driver files. I would go ahead and
quarantine or rename it. I have never seen a process that uses that file to indicate
it is crucial to the operating system. If renaming it does no harm to operation of
your operating system, then delete it. Sfc is best used on SP4 computers as running
it on earlier versions can delete hotfix files. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;222471
"Jan den Hollander" <jan@nospam.org> wrote in message
news:4108456C.EF4B31A5@nospam.org...
> AVG scanned my hard drive and said that a file
> WINNT\SYSTEM32\MCIWAVE.EXE was infected with this. The question I have
> is this: Is this a legitimate file for Windows 2000 or not? I searched
> the internet, and I found some conflicting remarks on this; some felt:
> good riddance!, others felt that AVG was mistaken about this one
>
> any insight in this is appreciated,
>
> Jan
- Next message: Steven L Umbach: "Re: Problems with giving the Domain Users group access to folders"
- Previous message: Steven L Umbach: "Re: HKLM\SAM\SAM\"
- In reply to: Jan den Hollander: "Trojan horse Downloader.Agent.2.F"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
