Virus Suspect

[Michael Miles <mmamiga6@xxxxxxxxx>]

this is what I find with avira
I'm just scanning and not doing anything with this file or files



file: /home/amiga5/.wine-x86_64/drive_c/windows/twain.dll
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2



  file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/dosx.exe.XXX
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2


  file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/dsound.vxd.XXX
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2


  file: /home/amiga5/.wine-x86_64/drive_c/windows/system32/ddhelp.exe.XXX
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2


file: /home/amiga5/.wine-x86_64/drive_c/windows/system/ddeml.dll.XXX
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2


file: /home/amiga5/.wine-x86_64/drive_c/windows/winhelp.exe.XXX
     last modified on  date: 2010-03-09  time: 14:16:14,  size: 1032 bytes
     ALERT: TR/Crypt.XPACK.Gen2 ; trojan ; Is the Trojan horse 
TR/Crypt.XPACK.Gen2
     ALERT-URL: http://www.avira.com/en/threats?q=TR%2FCrypt%2EXPACK%2EGen2


Are these false alerts or are they real?

Considering they are all the same trojan I would suspect false alert.

I could be wrong...Avira and Bitdefender both found these.... Clamav did 
not find any.

Michael
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines