Page 1 of 1

IR.EXE listed as "trojan" by some Anti-Virus progr

Posted: Thu Jun 01, 2006 10:38 am
by new2jp1
This could just as easily be asked in the software section, but I'm brand new to JP1, so I'll ask here.

Several Anti-Virus programs are listing ir.exe, which is needed for the jp1 programming to be a trojan. Why is that?

Posted: Thu Jun 01, 2006 10:51 am
by The Robman
Could you list which anti-virus programs you are using and what it is that they say about IR.exe.

Posted: Thu Jun 01, 2006 11:09 am
by new2jp1
http://www.symantec.com/avcenter/venc/d ... lunii.html

http://www.trendmicro.com/vinfo/virusen ... IE&VSect=T

http://www.file.net/process/ir.exe.html

I'm just guessing this is a different piece of software or that the IR.exe process is affected by other malware. Thanks to you Robman for your input.

Posted: Thu Jun 01, 2006 11:48 am
by The Robman
That's a totally different program that just happens to use the same name.

Posted: Thu Jun 01, 2006 12:43 pm
by ElizabethD
As Rob says, no connection.
I was doing some googling.
An old Trojan/downloader is floating about for the past 2-3 days.
One of the many things it does is to terminate and/or delete %System%\ir.exe.
CA/ZoneLabs: http://www3.ca.com/securityadvisor/viru ... x?id=42421 and http://www3.ca.com/securityadvisor/viru ... x?id=40354
McAfee: http://vil.nai.com/vil/content/v_128632.htm
Symantec: http://www.symantec.com/avcenter/venc/d ... lunii.html
CA: http://www3.ca.com/securityadvisor/pest ... =453096171

Here's a good one, but I don't know whether this is a legit site or even safe to click on. Free audit, free trojans :twisted: :twisted: :?:
http: //www dot auditmypc dot com/process/ir.asp
In the description they have this line "ir.exe (lunii trojan) - Details".

Posted: Thu Jun 01, 2006 6:31 pm
by new2jp1
yup...that's what I figured. Thanks again for your help.