Page 1 of 1

Is killproc.exe a virus?

PostPosted: Wed Sep 17, 2008 7:47 am
by Sidney
Today(09/17), eScan call me to run a quick system scan.
It says killproc.exe in %windows% and %system32% folders as virus.
But I think they are created by eScan.
Is it a false alert, or the old version killproc.exe really had virus infected??

PostPosted: Thu Sep 18, 2008 12:56 pm
by Varghese
Can you post the excerpts from the log that states killproc.exe as a virus. Just to cross check the file is an infected one or not.

As far as the file is concerned it is dropped by eScan and is not a Virus file.

PostPosted: Thu Sep 18, 2008 8:29 pm
by Sidney
I use Chinese version MWAV.
The log file from MWAV shown as below :

17 九月 2008 09:49:10 - 掃描檔案 C:\WINDOWS\killproc.exe
17 九月 2008 09:49:11 - 檔案 C:\WINDOWS\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。

and

17 九月 2008 09:50:32 - 掃描檔案 C:\WINDOWS\system32\killproc.exe
17 九月 2008 09:50:33 - 檔案 C:\WINDOWS\system32\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。

.

PostPosted: Fri Sep 19, 2008 5:16 pm
by Varghese
As per the logs its seems the system is infected with the virus which possibly could have infected killproc.exe as well.
I cant make out the Chinese characters. What does it say? Does it delete this file or disinfect it?

As far as escan is concerned it drops a copy of killproc.exe in following folders.

%Windir%
%temp%
%programfiles%\escan

PostPosted: Sat Sep 20, 2008 8:04 am
by Sidney
The log file says the two files had been deleted...
So I can NOT give you the "killproc.exe" file for sample...