| View previous topic :: View next topic |
| Author |
Message |
hansi1
Cadet
Joined: Jul 15, 2005
Posts: 1
Location: UK
|
 Posted: Fri Jul 15, 2005 6:09 am Post subject: MC27.tmp.vir spr/madtolc programme |
|
|
Currently having a problem removing this from my computer. My AV programme (AntiVir) finds it and puts it in quarantine, but next time I boot up I have to do this again and every single time I boot up. Anyone else having this problem?
|
|
| Back to top |
|
 |
NAMOR
Captain
Premium Member
Joined: Dec 23, 2003
Posts: 365
Location: USA
|
| Posted: Fri Jul 15, 2005 12:27 pm Post subject: |
|
|
I am seeing something similar. 7/15/2005,5:12:24 WARNING: Contains signature of the SPR/Madtol.C program! C:\DOCUME~1\*****\LOCALS~1\TEMP\MC21.TMP . I notice this when booting up my laptop. It appears that in my case the file is created by TrojanHunter's real-time monitor at startup, once started it gets deleted. I'm guessing this since TH's real-time scanner hangs until I select "allow" in Antivir's warning popup.
|
|
| Back to top |
|
|
NAMOR
Captain
Premium Member
Joined: Dec 23, 2003
Posts: 365
Location: USA
|
| Posted: Fri Jul 15, 2005 1:25 pm Post subject: |
|
|
Maybe next time you reboot you can select "Move file to quarantine". Next locate the quarantined file in the "infected" folder of the Antivir directory ( C:\Program Files\AVPersonal\INFECTED ). Then upload it to Jotti's online malware scanner ( http://virusscan.jotti.org/ ) and see what other AV's say about it. These are my results for the file I mentioned in the previous post.
| Quote: |
File: MC21.TMP
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain -, results will not be stored in the database.)
MD5 91380cadf1e18274ea2243a74ebe9a7e
Packers detected: -
Scanner results
AntiVir Found SPR/Madtol.C
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found not-a-virus:Tool.Win32.Madtol.c
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found nothing
|
If it comes up clean then do the following.
| Quote: |
Please send the suspicious files to virus@antivir-pe.de. If possibly
send them packed (WinZIP) and with the password “virus”. Our virus-lab
will check this and report to you as soon as possibly!
|
Kaspersky's viruslist site doesn't say much about it.....
http://www.viruslist.com/en/viruses/encyclopedia?virusid=79341
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
