Page 1 of 1
IR.EXE listed as "trojan" by some Anti-Virus progr
Posted: Thu Jun 01, 2006 10:38 am
by new2jp1
This could just as easily be asked in the software section, but I'm brand new to JP1, so I'll ask here.
Several Anti-Virus programs are listing ir.exe, which is needed for the jp1 programming to be a trojan. Why is that?
Posted: Thu Jun 01, 2006 10:51 am
by The Robman
Could you list which anti-virus programs you are using and what it is that they say about IR.exe.
Posted: Thu Jun 01, 2006 11:09 am
by new2jp1
http://www.symantec.com/avcenter/venc/d ... lunii.html
http://www.trendmicro.com/vinfo/virusen ... IE&VSect=T
http://www.file.net/process/ir.exe.html
I'm just guessing this is a different piece of software or that the IR.exe process is affected by other malware. Thanks to you Robman for your input.
Posted: Thu Jun 01, 2006 11:48 am
by The Robman
That's a totally different program that just happens to use the same name.
Posted: Thu Jun 01, 2006 12:43 pm
by ElizabethD
As Rob says, no connection.
I was doing some googling.
An old Trojan/downloader is floating about for the past 2-3 days.
One of the many things it does is to terminate and/or delete %System%\ir.exe.
CA/ZoneLabs:
http://www3.ca.com/securityadvisor/viru ... x?id=42421 and
http://www3.ca.com/securityadvisor/viru ... x?id=40354
McAfee:
http://vil.nai.com/vil/content/v_128632.htm
Symantec:
http://www.symantec.com/avcenter/venc/d ... lunii.html
CA:
http://www3.ca.com/securityadvisor/pest ... =453096171
Here's a good one, but I don't know whether this is a legit site or even safe to click on. Free audit, free trojans
http: //www dot auditmypc dot com/process/ir.asp
In the description they have this line "ir.exe (lunii trojan) - Details".
Posted: Thu Jun 01, 2006 6:31 pm
by new2jp1
yup...that's what I figured. Thanks again for your help.