IM-Worm.Win32.Sohanad.t

[mill]

I did a scan with this trojan scan and it found this worm ,should i be concerned?
http://www.windowsecurity.com/trojanscan/

It found it in the encoder ecl pro?

[blutach]

I'd update your virus scanner/defs.

Regards

[linx05]

And if updating your virus definitions doesn't do it, then report the problem to your AV vendor.

[mill]

Hey Blu, long time, hope all is well.
I take it your saying its a false positive?

[Guest]

I take it your saying its a false positive? Think about it, do you think jdobbs is distributing software with a worm inside?

[blutach]

Yes, all is well and echo what neuron2 says.

Good to see you again mill. :)

Regards

[mill]

:) Thanks everyone, Didnt mean to question the software, but i quess in a way i did. It was that encoder i was worried about,thanks again.

[jdobbs]

If I understand it completely, ECLPRO uses an EXE compression package that has at some point also been used by some hacker to try and mask a worm. If I remember correctly, it is because that method is associated with AutoIt (used to create ECLPRO). When your scanner sees that as a worm -- the fault in in the lack of specificity of the scanner, not the software.

It's a false positive.