Possible NetSky infection
Calypze
Stockholm, Sweden
Today suddenly I got a request from ZoneAlarm. It was avguard.exe that wanted to connect to the Internet, and it was stated that the program had changed since the last time it ran. I found the whole thing somewhat strange, and after some Googling I found out that there is a worm (NetSky, or at least a variant of it) that also comes with a file called avguard.exe. The worm supposedly disable AV protection, among other things.
How do I know if that avguard.exe is something legitimate or if it is that worm?
How do I know if that avguard.exe is something legitimate or if it is that worm?
0
Comments
Use http://www.virustotal.com/ to scan single files.
Just upload avguard.exe and click the Send file button.
Please copy and paste the results back into this thread.
No program on that site found anything in the avguard.exe file. It seems like it is ok.