Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | FTP log showing access attempts?

You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion
Register FAQ Community Calendar

W32/Gltroj.A
Reply
 
Thread Tools
Old 23-04-2004, 18:30   #1
iadom
In the corner, sulking.
 
iadom's Avatar
 
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: 2 TV 360 boxes. 500mb BB, Phone line.
Posts: 8,041
iadom has a nice shiny stariadom has a nice shiny star
iadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny star
W32/Gltroj.A

My AV software auto updated yesterday and the scheduled scan later in the day apparently found 4 infected files which it overwrote and deleted.
The Dynamic virus protection that runs in the background has just isolated and disinfected a file, A0042969.exe, in which it reports finding the same virus.
The four files deleted yesterday are in fact all legitimate files, some have been on the hard disc for over 12 months.
I can find W32/Gltroj.A in the massive list in the software but no description and a search on their website or a Google is fruitless, anyone have any info on this.

This is the log of yesterday's scan.
Scanner information:

Scan engine ID 4.279.33

SIGN.DEF 4/21/2004

SIGN2.DEF 4/22/2004

MACRO.DEF 4/22/2004

Started scan: 4/22/2004 10:54:29 PM

Scanning MBR of hard disk 0

Scanning boot sector of partition 0 on disk 0

No viruses were found in MBRs or hard disk boot sectors.

Scanning path: c:\

c:\Temp Downloads\REFUPD~1.EXE is a security risk named W32/Gltroj.A

c:\Temp Downloads\refupdate.exe is a security risk named W32/Gltroj.A

File overwritten and deleted.

c:\Temp Downloads\SETUPP~1.EXE is a security risk named W32/Gltroj.A

c:\Temp Downloads\SetupPestPatrolHome.exe is a security risk named W32/Gltroj.A

File overwritten and deleted.

c:\Temp Downloads\solsuite.exe is a security risk named W32/Gltroj.A

c:\Temp Downloads\solsuite.exe is a security risk named W32/Gltroj.A

File overwritten and deleted.

c:\Temp Downloads\update.exe is a security risk named W32/Gltroj.A

c:\Temp Downloads\update.exe is a security risk named W32/Gltroj.A

File overwritten and deleted.

Scan Results:

1 Boot Sectors Scanned

1 MBRs Scanned

0 Suspicious MBRs/Boot Sectors

0 Infected MBRs/Boot Sectors

15940 Files Scanned

38081 Files Processed

0 Files Suspicious

4 Files Infected

4 Viruses Found

Time of Scan:

0 hr 11 min 28 sec 971 msec

NB. Temp Downloads is a folder I created to keep them all in one tidy place.
iadom is offline   Reply With Quote
Advertisement
Old 23-04-2004, 19:44   #2
Paul
Dr Pepper Addict
Cable Forum Admin
 
Paul's Avatar
 
Join Date: Oct 2003
Location: Nottingham
Age: 63
Services: Zen & YouFibre FTTP, Sky Q TV, Sky Mobile, Flextel SIP
Posts: 31,303
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Paul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered starsPaul is seeing silvered stars
Re: W32/Gltroj.A

Sorry - never heard of it.
__________________

Baby, I was born this way.
Paul is offline   Reply With Quote
Old 23-04-2004, 19:48   #3
Chris W
cf.mega poster
 
Join Date: Nov 2003
Location: Reading
Age: 42
Services: Virgin Media Broadband Size M
Posts: 6,546
Chris W has a nice shiny star
Chris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny starChris W has a nice shiny star
Send a message via MSN to Chris W
Re: W32/Gltroj.A

can't find anything either

which AV programme is it you are using?
Chris W is offline   Reply With Quote
Old 23-04-2004, 20:53   #4
iadom
In the corner, sulking.
 
iadom's Avatar
 
Join Date: Jun 2003
Location: Shaw, Oldham, Lancashire.
Services: 2 TV 360 boxes. 500mb BB, Phone line.
Posts: 8,041
iadom has a nice shiny stariadom has a nice shiny star
iadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny stariadom has a nice shiny star
Re: W32/Gltroj.A

Quote:
Originally Posted by monkeybreath
can't find anything either

which AV programme is it you are using?
Command CSAV from Authentium, It has a "virus info" button on the GUI that lists many thousands of virus types and this one is listed but no details, I have searched everywhere but can find no reference. Have e-mailed them with the details, will let you know if anything comes up.
three of the four files deleted are in fact update.exe or setup files for Pest Patrol/ Adaware/ Spybot that have been scanned hundreds of times in the past.
Could be a false positive as I have not opened any attachments for some time.
iadom is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 20:29.


Server: lithium.zmnt.uk
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum