Page 1 of 1
Is killproc.exe a virus?
Posted:
Wed Sep 17, 2008 7:47 am
by Sidney
Today(09/17), eScan call me to run a quick system scan.
It says killproc.exe in %windows% and %system32% folders as virus.
But I think they are created by eScan.
Is it a false alert, or the old version killproc.exe really had virus infected??
Posted:
Thu Sep 18, 2008 12:56 pm
by Varghese
Can you post the excerpts from the log that states killproc.exe as a virus. Just to cross check the file is an infected one or not.
As far as the file is concerned it is dropped by eScan and is not a Virus file.
Posted:
Thu Sep 18, 2008 8:29 pm
by Sidney
I use Chinese version MWAV.
The log file from MWAV shown as below :
17 九月 2008 09:49:10 - 掃描檔案 C:\WINDOWS\killproc.exe
17 九月 2008 09:49:11 - 檔案 C:\WINDOWS\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。
and
17 九月 2008 09:50:32 - 掃描檔案 C:\WINDOWS\system32\killproc.exe
17 九月 2008 09:50:33 - 檔案 C:\WINDOWS\system32\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。
.
Posted:
Fri Sep 19, 2008 5:16 pm
by Varghese
As per the logs its seems the system is infected with the virus which possibly could have infected killproc.exe as well.
I cant make out the Chinese characters. What does it say? Does it delete this file or disinfect it?
As far as escan is concerned it drops a copy of killproc.exe in following folders.
%Windir%
%temp%
%programfiles%\escan
Posted:
Sat Sep 20, 2008 8:04 am
by Sidney
The log file says the two files had been deleted...
So I can NOT give you the "killproc.exe" file for sample...