Specrem Remote Access Trojan in WINDOWS\SYSTEM\SCRRUN.DLL

[Adam]

Howdy.
Does anyone have any info on this for me?

I did a clean load of Win98 on the 1st primary partition of my laptop.
No network drivers installed

I then did a clean load of XPSP2 on the third PP. (NTFS)
Connected network and copied drivers for 98 to 2nd PP (Fat32}
Loaded Office 2003, NAV, Microsoft Antispyware

I ran a Spyware scan which reported I had The Specrem Remote access trojan
in my 98 load.

Specrem Remote Access Trojan in WINDOWS\SYSTEM\SCRRUN.DLL

 

[plun]

Adam presented the following explanation :

SCRRUN

Maybe this can help you:

http://securityresponse.symantec.com/avcenter/venc/data/spyware.spygraphica.html

or this:

http://securityresponse.symantec.com/avcenter/venc/data/spyware.spyaol.html

 

[Bill Sanderson]

I would look at this very closely. You should be able to expand scrrun.dll
from your 98 media and compare to what you see on disk. Use plun's
references to see whether other files that would constitute that threat are
present. This could be a false positive.