Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

wkdstore a worm?


  • Please log in to reply
3 replies to this topic

#1 dominose

dominose

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:03:47 PM

Posted 16 March 2009 - 07:58 AM

Avira complained that WkDStore has recognition pattern of WORM/Mabezat.B.91
How could I find out if this is a false alarm?
Just delete it? It's in quarantine.
thanks
Laura

Edited by dominose, 16 March 2009 - 08:28 AM.


BC AdBot (Login to Remove)

 


#2 Jacee

Jacee

    Bleeping around


  • Malware Response Team
  • 3,716 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:12:47 PM

Posted 16 March 2009 - 12:04 PM

File WkDStore.exe is located in a subfolder of "C:\Program Files".

Some malware camouflage themselves as WkDStore.exe, particularly if they are located in c:\windows or c:\windows\system32 folder


Do you know the 'path' of the quarantined file?

Read more:
http://www.trendmicro.com/vinfo/virusencyc...=PE_MABEZAT.B-O

Edited by Jacee, 16 March 2009 - 12:07 PM.

MS_MVP.gif
MS MVP Windows-Security 2006-2016
Member of UNITE, the Unified Network of Instructors and Trusted Eliminators

Admin PC Pitstop


#3 dominose

dominose
  • Topic Starter

  • Members
  • 62 posts
  • OFFLINE
  •  
  • Local time:03:47 PM

Posted 16 March 2009 - 01:16 PM

File WkDStore.exe is located in a subfolder of "C:\Program Files".

Some malware camouflage themselves as WkDStore.exe, particularly if they are located in c:\windows or c:\windows\system32 folder


Do you know the 'path' of the quarantined file?

Read more:
http://www.trendmicro.com/vinfo/virusencyc...=PE_MABEZAT.B-O


I uploaded a copy of the "false alarm" to Avira, which is the antivirus program I'm using. They'll tell me what it is.

I looked online for typical things this worm does and I didn't find any such files on my computer, so I think it's a false alarm.

thanks
Laura

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,091 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:03:47 PM

Posted 16 March 2009 - 04:17 PM

Use this web page to double check: http://virusscan.jotti.org

FWIW - I don't let anything dubious sit on my system long enough to visit Jotti - I quarantine it immediately!
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users