Re: Win32/Crypted - Help please

On Tue, 31 Jan 2006 18:59:07 -0000, "John Dean"
<john-dean@xxxxxxxxxxxxxxxx> wrote:

>Art wrote:
>> On Tue, 31 Jan 2006 15:37:32 -0000, "John Dean"
>> <john-dean@xxxxxxxxxxxxxxxx> wrote:
>>
>>> Been using Download Accelerator Plus (DAP) as a download manager for
>>> years with no virus problems. Today tried to download a file and got
>>> a warning from AVG Free Resident Shield "Virus detected" indicating
>>> "While opening file "C:\Program Files etc \DAP\DAP.exe Virus found
>>> Win32/Crypted"
>>> Pressed the information button and got a pop-up window to search the
>>> Virus Encyclopaedia but no Win32/Crypted there. Went to the AVG site
>>> to search directly but still no Win32/Crypted.
>>> Any ideas what's happening? If I move the file to the Vault, will
>>> that disable DAP? Any info on Win32/Crypted?
>>
>> There is a virus named Bugbear that infects the dap.exe d/l manager:
>>
>> http://www.f-secure.com/v-descs/bugbear_b.shtml
>>
>> AVG is either false alarming or perhaps it detects a virus such as
>> Bugbear. To check it out, upload your dap.exe file to Virus Total:
>>
>> http://www.virustotal.com/xhtml/index_en.html
>>
>> to see what other av products have to say about the file. Let
>> us know if it turns out to be a fp by AVG ... and if so, they
>> should be informed.
>>
>
>Thanks for that. On Virustotal it comes up "No virus found" via a dozen
>or so engines. Very useful service.

You can also use jotti:

http://virusscan.jotti.org/

> What's the mechanism for telling AVG?

virus@xxxxxxxxxxx

Usually, vendors want samples sent zipped and sometimes password
protected. At least zip it. And make sure to supply them with all
pertinent info in the message body.

Art
http://home.epix.net/~artnpeg
.

Quantcast