trojan horse - sysmon.exe

On Mon, 29 Oct 2007 14:12:59 -0500, Michael <mbsmith65.TakeThisOut@hotmail.com>
wrote:

>Trend Micro Pc-cillin Internet Security 14 has detected a trojan horse
>in c:/windows/system32/sysmon.exe , but it cannot quarantine or clean
>it out of my system. Can anyone suggest how I might proceed to get
>rid of it? Many thanks in advance.

The file may be legit and Trend is false alarming. Upload the file to
Jotti or Virus Total to see what other av scanners say. If most
other scanners don't alert, then send the file to Trend for
analysis so they can fix their f.p.

If the file does appear to be malware, a little Googling on the
file name will lead you to descriptions and removal instructions.

Art
 >> Stay informed about: trojan horse - sysmon.exe 

On 10 30 , 3 12 , Michael <mbsmit... DeleteThis @hotmail.com> wrote:
> Trend Micro Pc-cillin Internet Security 14 has detected a trojan horse
> in c:/windows/system32/sysmon.exe , but it cannot quarantine or clean
> it out of my system. Can anyone suggest how I might proceed to get
> rid of it? Many thanks in advance.

Can you send your c:/windows/system32/sysmon.exe to me:
codingforvirus DeleteThis @gmail.com, thanks.
 >> Stay informed about: trojan horse - sysmon.exe 

On Tue, 30 Oct 2007 06:51:53 -0700, coding.hello.RemoveThis@gmail.com wrote:

>Can you send your c:/windows/system32/sysmon.exe to me:
>codingforvirus@gmail.com, thanks.

Michael: My email to you at codingforvirus.RemoveThis@gmail.com bounced. What
address should I use? Pete
 >> Stay informed about: trojan horse - sysmon.exe 

This message is not archived
 >> Stay informed about: trojan horse - sysmon.exe 

coding.hello RemoveThis @gmail.com wrote:
> On 10 30 , 3 12 , Michael <mbsmit... RemoveThis @hotmail.com> wrote:
>> Trend Micro Pc-cillin Internet Security 14 has detected a trojan horse
>> in c:/windows/system32/sysmon.exe , but it cannot quarantine or clean
>> it out of my system. Can anyone suggest how I might proceed to get
>> rid of it? Many thanks in advance.
>
> Can you send your c:/windows/system32/sysmon.exe to me:
> codingforvirus RemoveThis @gmail.com, thanks.

is there any particular reason people should entrust malware samples to you?

please don't troll for potential malware here... it encourages the
uncontrolled distribution of malware and that enables people to spread
it maliciously...

--
"it's not the right time to be sober
now the idiots have taken over
spreading like a social cancer,
is there an answer?"
 >> Stay informed about: trojan horse - sysmon.exe 

Uncontrolled distribution how? you pervert.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"kurt wismer" <kurtw DeleteThis @sympatico.ca> wrote in message
news:fg8smc$lpg$2@registered.motzarella.org...
> coding.hello DeleteThis @gmail.com wrote:
>> On 10 30 , 3 12 , Michael <mbsmit... DeleteThis @hotmail.com> wrote:
>>> Trend Micro Pc-cillin Internet Security 14 has detected a trojan horse
>>> in c:/windows/system32/sysmon.exe , but it cannot quarantine or clean
>>> it out of my system. Can anyone suggest how I might proceed to get
>>> rid of it? Many thanks in advance.
>>
>> Can you send your c:/windows/system32/sysmon.exe to me:
>> codingforvirus DeleteThis @gmail.com, thanks.
>
> is there any particular reason people should entrust malware samples to
> you?
>
> please don't troll for potential malware here... it encourages the
> uncontrolled distribution of malware and that enables people to spread it
> maliciously...
>
> --
> "it's not the right time to be sober
> now the idiots have taken over
> spreading like a social cancer,
> is there an answer?"
 >> Stay informed about: trojan horse - sysmon.exe 

On Mon, 29 Oct 2007 22:50:26 GMT, Art <null.DeleteThis@zilch.com> wrote:

>On Mon, 29 Oct 2007 14:12:59 -0500, Michael <mbsmith65.DeleteThis@hotmail.com>
>wrote:
>
>>Trend Micro Pc-cillin Internet Security 14 has detected a trojan horse
>>in c:/windows/system32/sysmon.exe , but it cannot quarantine or clean
>>it out of my system. Can anyone suggest how I might proceed to get
>>rid of it? Many thanks in advance.
>
>The file may be legit and Trend is false alarming. Upload the file to
>Jotti or Virus Total to see what other av scanners say. If most
>other scanners don't alert, then send the file to Trend for
>analysis so they can fix their f.p.
>
>If the file does appear to be malware, a little Googling on the
>file name will lead you to descriptions and removal instructions.
>
>Art
Thanks for the suggestions.
I am unable to upload the file, either through e-mail or through the
uploader on the sites you've suggested.
It may be a false alarm, since my system isn't exhibiting any bizarre
behavior that one might expect if infected, but the fact that my AV
software thinks otherwise is cause for concern.
Curious that I cannot attach this file to an e-mail. I get an error
message I've never seen before, and I've sent other files in the past
without error.
Has anyone experienced anything like this before?
 >> Stay informed about: trojan horse - sysmon.exe