Mplayer2.exe and Download.Trojan problem
RedFox07-23-04, 10:14 PMsomethingEsteemed Virus Gurus :-)
I have been running NAV on an installation of
Win2k, now with SP4, for almost two years. I cannot
remember installing WMP and I was not interested
in it. Meantime I ran NAV at least every week on
the drive.
A couple of weeks ago I was surprised to see
Windows Media Player in the C:\program files
folder. I clicked on the folder for some reason
and NAV popped up a message Virus Alert - object
name C:\prog files\Windows Media Player\wmplayer.exe.
Virus name: Download.Trojan. It indicated that the virus
was automatically deleted.
Curiously there was no wmplayer.exe but there was
a mplayer2.exe and 4 other files: 3 dlls and a
logagent.exe. In the past few months there were
several attempts by mplayer2.exe to access the
Internet but Zonealarm blocked it. At that time I
didn't know where this program was. At one time I
noticed it in the control panel and I removed it.
Mplayer2.exe has a file version 6.4.9.1109
Today I clicked on that folder again and the NAV
virus alert popped again with the same message as
before. I then tried to delete the files but
within ten seconds they were back. I renamed a
few but very soon the original files were back.
Now I know that windows 2k has an auto mechanism
that replaces system files if the are deleted, but
these are not system files and I suspect that
there is a virus there.
I used NAV to quarantine the two .exe files but
I doubt that will do any good.
I have been an NAV subscriber for two years and,
the first time I need to contact them, I see that they charge
$30 or $3 an hour. Does the competition have these kind
of charges? I would think subscribers should at least have
one or two free incidents per year.
TIA
MR
Shepard Tate07-28-04, 05:43 PMsomethingI just posted a question with a similar problem as yours. I see you
have had no responses here, but were you able to figure out what is
happening?
Thanks
"RedFox" <RedFox@NoDen.con> wrote in message news:<Y_cMc.12760$Qu5.858@newsread2.news.pas.earthlink.n et>...
> Esteemed Virus Gurus :-)
>
> I have been running NAV on an installation of
> Win2k, now with SP4, for almost two years. I cannot
> remember installing WMP and I was not interested
> in it. Meantime I ran NAV at least every week on
> the drive.
>
> A couple of weeks ago I was surprised to see
> Windows Media Player in the C:\program files
> folder. I clicked on the folder for some reason
> and NAV popped up a message Virus Alert - object
> name C:\prog files\Windows Media Player\wmplayer.exe.
> Virus name: Download.Trojan. It indicated that the virus
> was automatically deleted.
>
> Curiously there was no wmplayer.exe but there was
> a mplayer2.exe and 4 other files: 3 dlls and a
> logagent.exe. In the past few months there were
> several attempts by mplayer2.exe to access the
> Internet but Zonealarm blocked it. At that time I
> didn't know where this program was. At one time I
> noticed it in the control panel and I removed it.
> Mplayer2.exe has a file version 6.4.9.1109
>
> Today I clicked on that folder again and the NAV
> virus alert popped again with the same message as
> before. I then tried to delete the files but
> within ten seconds they were back. I renamed a
> few but very soon the original files were back.
> Now I know that windows 2k has an auto mechanism
> that replaces system files if the are deleted, but
> these are not system files and I suspect that
> there is a virus there.
>
> I used NAV to quarantine the two .exe files but
> I doubt that will do any good.
>
> I have been an NAV subscriber for two years and,
> the first time I need to contact them, I see that they charge
> $30 or $3 an hour. Does the competition have these kind
> of charges? I would think subscribers should at least have
> one or two free incidents per year.
>
> TIA
>
> MR
I have been running NAV on an installation of
Win2k, now with SP4, for almost two years. I cannot
remember installing WMP and I was not interested
in it. Meantime I ran NAV at least every week on
the drive.
A couple of weeks ago I was surprised to see
Windows Media Player in the C:\program files
folder. I clicked on the folder for some reason
and NAV popped up a message Virus Alert - object
name C:\prog files\Windows Media Player\wmplayer.exe.
Virus name: Download.Trojan. It indicated that the virus
was automatically deleted.
Curiously there was no wmplayer.exe but there was
a mplayer2.exe and 4 other files: 3 dlls and a
logagent.exe. In the past few months there were
several attempts by mplayer2.exe to access the
Internet but Zonealarm blocked it. At that time I
didn't know where this program was. At one time I
noticed it in the control panel and I removed it.
Mplayer2.exe has a file version 6.4.9.1109
Today I clicked on that folder again and the NAV
virus alert popped again with the same message as
before. I then tried to delete the files but
within ten seconds they were back. I renamed a
few but very soon the original files were back.
Now I know that windows 2k has an auto mechanism
that replaces system files if the are deleted, but
these are not system files and I suspect that
there is a virus there.
I used NAV to quarantine the two .exe files but
I doubt that will do any good.
I have been an NAV subscriber for two years and,
the first time I need to contact them, I see that they charge
$30 or $3 an hour. Does the competition have these kind
of charges? I would think subscribers should at least have
one or two free incidents per year.
TIA
MR
Shepard Tate07-28-04, 05:43 PMsomethingI just posted a question with a similar problem as yours. I see you
have had no responses here, but were you able to figure out what is
happening?
Thanks
"RedFox" <RedFox@NoDen.con> wrote in message news:<Y_cMc.12760$Qu5.858@newsread2.news.pas.earthlink.n et>...
> Esteemed Virus Gurus :-)
>
> I have been running NAV on an installation of
> Win2k, now with SP4, for almost two years. I cannot
> remember installing WMP and I was not interested
> in it. Meantime I ran NAV at least every week on
> the drive.
>
> A couple of weeks ago I was surprised to see
> Windows Media Player in the C:\program files
> folder. I clicked on the folder for some reason
> and NAV popped up a message Virus Alert - object
> name C:\prog files\Windows Media Player\wmplayer.exe.
> Virus name: Download.Trojan. It indicated that the virus
> was automatically deleted.
>
> Curiously there was no wmplayer.exe but there was
> a mplayer2.exe and 4 other files: 3 dlls and a
> logagent.exe. In the past few months there were
> several attempts by mplayer2.exe to access the
> Internet but Zonealarm blocked it. At that time I
> didn't know where this program was. At one time I
> noticed it in the control panel and I removed it.
> Mplayer2.exe has a file version 6.4.9.1109
>
> Today I clicked on that folder again and the NAV
> virus alert popped again with the same message as
> before. I then tried to delete the files but
> within ten seconds they were back. I renamed a
> few but very soon the original files were back.
> Now I know that windows 2k has an auto mechanism
> that replaces system files if the are deleted, but
> these are not system files and I suspect that
> there is a virus there.
>
> I used NAV to quarantine the two .exe files but
> I doubt that will do any good.
>
> I have been an NAV subscriber for two years and,
> the first time I need to contact them, I see that they charge
> $30 or $3 an hour. Does the competition have these kind
> of charges? I would think subscribers should at least have
> one or two free incidents per year.
>
> TIA
>
> MR