Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

CrucialScan.exe detected as trojan horse

 
   Security Forums (Home) -> General Discussions RSS
Next:  Norton about to run out need advice  
Author Message
banjolicious

External


Since: Aug 02, 2006
Posts: 1



(Msg. 1) Posted: Wed Aug 02, 2006 4:01 am
Post subject: CrucialScan.exe detected as trojan horse
Archived from groups: alt>comp>virus (more info?)

Symantec AV corp 9 just detected CrucialScan.exe as a trojan horse on
my system. It was in a folder I use for internet downloads, and I'm
pretty sure it was actually Crucial.com's application that determines
what type / speed memory is used in a PC. In any case, it had been
sitting there a VERY long time.

Any idea why its suddenly considered a threat?

 >> Stay informed about: CrucialScan.exe detected as trojan horse 
Back to top
Login to vote
Art

External


Since: Jun 06, 2006
Posts: 166



(Msg. 2) Posted: Wed Aug 02, 2006 2:18 pm
Post subject: Re: CrucialScan.exe detected as trojan horse [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On 2 Aug 2006 04:01:20 -0700, banjolicious.DeleteThis@netscape.net wrote:

>Symantec AV corp 9 just detected CrucialScan.exe as a trojan horse on
>my system. It was in a folder I use for internet downloads, and I'm
>pretty sure it was actually Crucial.com's application that determines
>what type / speed memory is used in a PC. In any case, it had been
>sitting there a VERY long time.
>
>Any idea why its suddenly considered a threat?

I just downloaded that file from here:

http://images.crucial.com/drivers/CrucialScan.exe

and then submitted it to Virus Total. The only product that
produced a alert is Panda, which alerts as Trj/Zorro.A
That appears to me to be a false alarm from Panda, and
I suspect you experienced a false alarm from Symantec
on the file. If Symantec hasn't deleted the file, you can
upload it to Virus Total and/or Jotti to see for yourself
what other antimalware products find. If indeed it does
appear to be a FP then submit the file to Symantec for
analysis and possible correction of the FP.

http://www.virustotal.com/en/indexf.html
http://www.ik-cs.com/suspicious-files.htm

Art
http://home.epix.net/~artnpeg

 >> Stay informed about: CrucialScan.exe detected as trojan horse 
Back to top
Login to vote
edgewalker

External


Since: Apr 07, 2006
Posts: 111



(Msg. 3) Posted: Wed Aug 02, 2006 5:06 pm
Post subject: Re: CrucialScan.exe detected as trojan horse [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

<banjolicious.DeleteThis@netscape.net> wrote in message news:1154516480.408453.65260@h48g2000cwc.googlegroups.com...
> Symantec AV corp 9 just detected CrucialScan.exe as a trojan horse on
> my system. It was in a folder I use for internet downloads, and I'm
> pretty sure it was actually Crucial.com's application that determines
> what type / speed memory is used in a PC. In any case, it had been
> sitting there a VERY long time.
>
> Any idea why its suddenly considered a threat?

What "threat" did the scanner indicate? It could be a "potentially unwanted
program" and as such not a false positive. What was the wording of the alert?
 >> Stay informed about: CrucialScan.exe detected as trojan horse 
Back to top
Login to vote
David H. Lipman

External


Since: Jul 04, 2003
Posts: 1719



(Msg. 4) Posted: Thu Aug 03, 2006 7:30 pm
Post subject: Re: CrucialScan.exe detected as trojan horse [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

From: "Art" <null DeleteThis @zilch.com>

| On 2 Aug 2006 04:01:20 -0700, banjolicious DeleteThis @netscape.net wrote:

>>Symantec AV corp 9 just detected CrucialScan.exe as a trojan horse on
>>my system. It was in a folder I use for internet downloads, and I'm
>>pretty sure it was actually Crucial.com's application that determines
>>what type / speed memory is used in a PC. In any case, it had been
>>sitting there a VERY long time.

>>Any idea why its suddenly considered a threat?

| I just downloaded that file from here:

| http://images.crucial.com/drivers/CrucialScan.exe

| and then submitted it to Virus Total. The only product that
| produced a alert is Panda, which alerts as Trj/Zorro.A
| That appears to me to be a false alarm from Panda, and
| I suspect you experienced a false alarm from Symantec
| on the file. If Symantec hasn't deleted the file, you can
| upload it to Virus Total and/or Jotti to see for yourself
| what other antimalware products find. If indeed it does
| appear to be a FP then submit the file to Symantec for
| analysis and possible correction of the FP.

| http://www.virustotal.com/en/indexf.html
| http://www.ik-cs.com/suspicious-files.htm

| Art
| http://home.epix.net/~artnpeg

From Panda concerning Flase Positive...

"Fixed in today's signature file.

Thanks"



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
 >> Stay informed about: CrucialScan.exe detected as trojan horse 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Damn trojan in my temp (probably). Advice needed. - Ok , this is how the situation has. 3 days my firewall poped up and an application in my C:\Documents And Settings\Administrator\Local Settings\temp wanted to connect at port 80 of an address. It had a weird icon and a weird name ( Rar1.exe). I denied....

Running a trojan program and Virus programs a waste of time? - Thanks for opinions of the knowledgable ones:>) Regards Buddy B

Poss trojan? - I just updated my AVG database, and it picked up a back door Ap trojan. Details are: C:\Windows\system32\XUDERSD.exe. When I try to remove it to quarantine, a message says the file cannot be removed. I checked it with V.3.5 of The Cleaner, which doesn't...

church trojan - Last week it was discovered our church computer(s) have a trojan virus. There are three networked together. The internet provider phoned the secretary and told her that a port was open. I looked for suspicious .exe files and found "pipecmdsvr.exe&q...

deltee trojan - hi all ive just done a full system virus check and Norton has found what it calls the deltree trojan, it says the file it has infected (delete.bat) cannot be repaired or deleted so its been put into quarantine. what do i do now, can i leave it there..
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]