Is killproc.exe a virus?

Moderators: Divesh, Gurdip Singh

Is killproc.exe a virus?

Postby Sidney » Wed Sep 17, 2008 7:47 am

Today(09/17), eScan call me to run a quick system scan.
It says killproc.exe in %windows% and %system32% folders as virus.
But I think they are created by eScan.
Is it a false alert, or the old version killproc.exe really had virus infected??
Sidney
Taiwan eScan & MailScan Distributor
Duckysoft Co., Ltd.
http://www.escan.com.tw
Sidney
 
Posts: 55
Joined: Mon Apr 14, 2008 8:12 am
Location: Taiwan

Postby Varghese » Thu Sep 18, 2008 12:56 pm

Can you post the excerpts from the log that states killproc.exe as a virus. Just to cross check the file is an infected one or not.

As far as the file is concerned it is dropped by eScan and is not a Virus file.
Varghese
 
Posts: 144
Joined: Sat Dec 29, 2007 11:52 am
Location: Mumbai

Postby Sidney » Thu Sep 18, 2008 8:29 pm

I use Chinese version MWAV.
The log file from MWAV shown as below :

17 九月 2008 09:49:10 - 掃描檔案 C:\WINDOWS\killproc.exe
17 九月 2008 09:49:11 - 檔案 C:\WINDOWS\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。

and

17 九月 2008 09:50:32 - 掃描檔案 C:\WINDOWS\system32\killproc.exe
17 九月 2008 09:50:33 - 檔案 C:\WINDOWS\system32\killproc.exe 被"Trojan.Win32.Agent.adre"病毒感染! 動作: 刪除檔案。

.
Sidney
Taiwan eScan & MailScan Distributor
Duckysoft Co., Ltd.
http://www.escan.com.tw
Sidney
 
Posts: 55
Joined: Mon Apr 14, 2008 8:12 am
Location: Taiwan

Postby Varghese » Fri Sep 19, 2008 5:16 pm

As per the logs its seems the system is infected with the virus which possibly could have infected killproc.exe as well.
I cant make out the Chinese characters. What does it say? Does it delete this file or disinfect it?

As far as escan is concerned it drops a copy of killproc.exe in following folders.

%Windir%
%temp%
%programfiles%\escan
Varghese
 
Posts: 144
Joined: Sat Dec 29, 2007 11:52 am
Location: Mumbai

Postby Sidney » Sat Sep 20, 2008 8:04 am

The log file says the two files had been deleted...
So I can NOT give you the "killproc.exe" file for sample...
Sidney
Taiwan eScan & MailScan Distributor
Duckysoft Co., Ltd.
http://www.escan.com.tw
Sidney
 
Posts: 55
Joined: Mon Apr 14, 2008 8:12 am
Location: Taiwan


Return to Virus-related Issues

Who is online

Users browsing this forum: No registered users and 1 guest

cron