Welcome, Guest. Please login or register.
Did you miss your activation email?
June 19, 2013, 10:36:51 AM

Login with username, password and session length

668899 Posts
71132 Topics
145741 Members

Latest Member: DeRo 0000

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Virus/Malware Removal Assistance
| | |-+  TrendMicro reports WORM_DOWNAD.AD but Comodo not
« previous next »
Pages: [1] Go Down Print
Author Topic: TrendMicro reports WORM_DOWNAD.AD but Comodo not  (Read 7536 times)
kaweka
Comodo Member
**
Offline Offline

Posts: 33


TrendMicro reports WORM_DOWNAD.AD but Comodo not
« on: January 30, 2009, 03:16:06 PM »

MicroTrend on some winxp machine has reported today for my usb drive (portable applications installed on the usb drive) the WORM_DOWNAD.AD in the "Restorer" directory or similar.
But CIS actual version on some other machine, vista 32bits business, claims this drive was clean, no maleware findings by CIS.

I'd like to switch off the autorun facility (portapps created on this drive autorun.inf file) for usb drives in this vista machine,
but wasn't able to find the appropriate setting.
a) Drive Icon->Properties - auto play tab not present at all
b) Control Panel -> Auto Play -> this drive not presented in the group "portable devices"
c) drive autorun dialog -> set default action in control panel -> as in case of (b)

* hijackthis.txt (6.46 KB - downloaded 2 times.)
« Last Edit: January 30, 2009, 03:22:13 PM by kaweka » Logged
SecurityManiac
Malware Research Group
Comodo's Hero
*****
Offline Offline

Posts: 415


Live today Life might end tomorrow


Re: TrendMicro reports WORM_DOWNAD.AD but Comodo not
« Reply #1 on: January 31, 2009, 02:09:17 AM »

You might to upload the file at. http://camas.comodo.com/cgi-bin/submit

Also what does virustotal say? www.virustotal.com
Logged
JamesFrance
Comodo's Hero
*****
Offline Offline

Posts: 1253



Re: TrendMicro reports WORM_DOWNAD.AD but Comodo not
« Reply #2 on: February 01, 2009, 02:19:28 PM »

Nothing showing in HJT, but Trend Micro has this:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_DOWNAD.AD&VSect=Sn
Logged

James
Tags: malware  Antivirus  Worm 
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.044 seconds with 21 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com