On 2 Aug 2006 04:01:20 -0700, banjolicious.DeleteThis@netscape.net wrote:
>Symantec AV corp 9 just detected CrucialScan.exe as a trojan horse on
>my system. It was in a folder I use for internet downloads, and I'm
>pretty sure it was actually Crucial.com's application that determines
>what type / speed memory is used in a PC. In any case, it had been
>sitting there a VERY long time.
>
>Any idea why its suddenly considered a threat?
I just downloaded that file from here:
http://images.crucial.com/drivers/CrucialScan.exe
and then submitted it to Virus Total. The only product that
produced a alert is Panda, which alerts as Trj/Zorro.A
That appears to me to be a false alarm from Panda, and
I suspect you experienced a false alarm from Symantec
on the file. If Symantec hasn't deleted the file, you can
upload it to Virus Total and/or Jotti to see for yourself
what other antimalware products find. If indeed it does
appear to be a FP then submit the file to Symantec for
analysis and possible correction of the FP.
http://www.virustotal.com/en/indexf.html
http://www.ik-cs.com/suspicious-files.htm
Art
http://home.epix.net/~artnpeg