"Eraser" disk cleaner has trojans?

slate_leeper

unread,

Oct 15, 2009, 8:06:23 AM10/15/09

to

Every time I run Eraser, as it finishes and says it is erasing
temporary files, Avira's antivirus product shows one or two trojans:

C:\~ERAFSWD.TMP\actxprxy.dll, is the TR/Dropper.Gen Trojan
C:\~ERAFSWD.TMP\mspmsnsv.dll, is the TR/Dropper.Gen Trojan

Does anyone know if these are false positives, or actually something
to worry about? I always instruct Avira to deny access.

-dan z-

--
Protect your civil rights!
Let the politicians know how you feel.
Join or donate to the NRA today!
http://membership.nrahq.org/default.asp?campaignid=XR014887

Buffalo

unread,

Oct 15, 2009, 10:06:27 AM10/15/09

to

slate_leeper wrote:
> Every time I run Eraser, as it finishes and says it is erasing
> temporary files, Avira's antivirus product shows one or two trojans:
>
> C:\~ERAFSWD.TMP\actxprxy.dll, is the TR/Dropper.Gen Trojan
> C:\~ERAFSWD.TMP\mspmsnsv.dll, is the TR/Dropper.Gen Trojan
>
> Does anyone know if these are false positives, or actually something
> to worry about? I always instruct Avira to deny access.

Probably a false positive, as Avira finds a lot of them.

Send the two files to VirusTotal.com and see what that site finds.
When you go to the virustotal web page, you can just upload the file while
on the site.
First do a search for their location (probably just need the file name
after the \ .

Or do a scan online from another antivirus vender.

Buffalo

unread,

Oct 15, 2009, 10:16:33 AM10/15/09

to

slate_leeper wrote:
> Every time I run Eraser, as it finishes and says it is erasing
> temporary files, Avira's antivirus product shows one or two trojans:
>
> C:\~ERAFSWD.TMP\actxprxy.dll, is the TR/Dropper.Gen Trojan
> C:\~ERAFSWD.TMP\mspmsnsv.dll, is the TR/Dropper.Gen Trojan
>
> Does anyone know if these are false positives, or actually something
> to worry about? I always instruct Avira to deny access.

mspmsnsv.dll and actxprxy.dll may possibly be bad.
Check out this site also.
Still, locate the above two files and send them to VirusTotal.com for a
free scan by many different antivirus programs.

http://www.superantispyware.com/malwarefiles/MSPMSNSV.DLL.html

SuperAntiSpyware (SAS) is available in a free version and is an excellent
program.
Same with MalwareBytes AntiMalware (MBAM).

Buffalo

Message has been deleted

Elmer Fudd

unread,

Oct 27, 2009, 10:20:59 PM10/27/09

to

Buffalo wrote:

> Probably a false positive, as Avira finds a lot of them.

Yea, the one really bad thing about Avira. It is frequently identifying
harmless game files as virii. Right now it is identifying Tages copy
protection in one of my game folders as a trojan that isn't.

Elmer Fudd

unread,

Oct 27, 2009, 10:22:17 PM10/27/09

to

FredW wrote:

> Yes, false positives.
> They appear, depending on which version of Heidi Eraser you use.
>
> You could try an older version.
>

I use eraser portable from portableapps.com and Avira has never detected
it as a trojan.

David H. Lipman

unread,

Oct 27, 2009, 10:47:08 PM10/27/09

to

From: "Elmer Fudd" <e...@invalid.invalid>

| Buffalo wrote:

Avira AntiVir *NEVER* has nor will it ever indicate files to be infected with "virii" or
"viri". :-)

http://homepages.tesco.net/~J.deBoynePollard/FGA/plural-of-virus.html
http://linuxmafia.com/~rick/faq/plural-of-virus.html
http://en.wikipedia.org/wiki/Plural_of_virus

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp