Win32/Crypted - Help please

[John Dean]

Been using Download Accelerator Plus (DAP) as a download manager for
years with no virus problems. Today tried to download a file and got a
warning from AVG Free Resident Shield "Virus detected" indicating "While
opening file "C:\Program Files etc \DAP\DAP.exe Virus found
Win32/Crypted"
Pressed the information button and got a pop-up window to search the
Virus Encyclopaedia but no Win32/Crypted there. Went to the AVG site to
search directly but still no Win32/Crypted.
Any ideas what's happening? If I move the file to the Vault, will that
disable DAP? Any info on Win32/Crypted?

 

[Noel Paton]

DAP is a dubious program at best of times - get rid of it and use a decent
download manager.
Nothing 'accelerates' downloads - despite claims to the contrary.

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read on how to post messages to NG's

 

[Art]

Been using Download Accelerator Plus (DAP) as a download manager for
years with no virus problems. Today tried to download a file and got a
warning from AVG Free Resident Shield "Virus detected" indicating "While
opening file "C:\Program Files etc \DAP\DAP.exe Virus found
Win32/Crypted"
Pressed the information button and got a pop-up window to search the
Virus Encyclopaedia but no Win32/Crypted there. Went to the AVG site to
search directly but still no Win32/Crypted.
Any ideas what's happening? If I move the file to the Vault, will that
disable DAP? Any info on Win32/Crypted?

There is a virus named Bugbear that infects the dap.exe d/l manager:

http://www.f-secure.com/v-descs/bugbear_b.shtml

AVG is either false alarming or perhaps it detects a virus such as
Bugbear. To check it out, upload your dap.exe file to Virus Total:

http://www.virustotal.com/xhtml/index_en.html

to see what other av products have to say about the file. Let
us know if it turns out to be a fp by AVG ... and if so, they
should be informed.

Art
http://home.epix.net/~artnpeg

 

[John Dean]

DAP is a dubious program at best of times - get rid of it and use a
decent download manager.

Thank you. That's extraordinarily helpful in my present situation. Thank
you for taking the trouble.

Nothing 'accelerates' downloads - despite claims to the contrary.

Who said it did?

BTW - do you come from a family of top posters or is it just you?

 

[Noel Paton]

Thank you. That's extraordinarily helpful in my present situation. Thank
you for taking the trouble.

Glad to point you in the right direction :

Who said it did?

DAP - didn't you notice the name of the program?

BTW - do you come from a family of top posters or is it just you?

I try to follow the local custom - but as I spend most of my time in groups
where top-posting is the norm, I occasionally forget

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read on how to post messages to NG's

 

[John Dean]

There is a virus named Bugbear that infects the dap.exe d/l manager:

http://www.f-secure.com/v-descs/bugbear_b.shtml

AVG is either false alarming or perhaps it detects a virus such as
Bugbear. To check it out, upload your dap.exe file to Virus Total:

http://www.virustotal.com/xhtml/index_en.html

to see what other av products have to say about the file. Let
us know if it turns out to be a fp by AVG ... and if so, they
should be informed.

Thanks for that. On Virustotal it comes up "No virus found" via a dozen
or so engines. Very useful service. What's the mechanism for telling
AVG?

 

[Art]

Thanks for that. On Virustotal it comes up "No virus found" via a dozen
or so engines. Very useful service.

You can also use jotti:

http://virusscan.jotti.org/

What's the mechanism for telling AVG?

(e-mail address removed)

Usually, vendors want samples sent zipped and sometimes password
protected. At least zip it. And make sure to supply them with all
pertinent info in the message body.

Art
http://home.epix.net/~artnpeg

 

[Noel Paton]

(e-mail address removed)
<quote>
I would like to ask you to send us the files for the analysis. Kindly send
them to us in a password-protected archive and include the password into the
body of the e-mail.
</quote>
I'd include a copy of the virustotal results.


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read on how to post messages to NG's

 

[John Dean]

You can also use jotti:

http://virusscan.jotti.org/


(e-mail address removed)

Usually, vendors want samples sent zipped and sometimes password
protected. At least zip it. And make sure to supply them with all
pertinent info in the message body.

Yabbut, I don't have a virus, only a warning message. Or do you mean
send them the clean file?

 

[Art]

Yabbut, I don't have a virus, only a warning message. Or do you mean
send them the clean file?

AVG was false alarming on the file, so they need the file to correct
the fp.

Art
http://home.epix.net/~artnpeg

 

[John Dean]

DAP - didn't you notice the name of the program?

Sure. I notice the name of all sorts of programs. I don't think a
program name constitutes a claim. Mailwasher doesn't wash mail. Adobe
Acrobat doesn't turn somersaults. You and I use Outlook Express and it's
not very fast. Partition Magic actually works through prosaic and
mundane technology. Wordperfect has its faults and Microsoft Paint
doesn't contain anything wet.

 

[Gabriele Neukam]

On that special day, John Dean, ([email protected]) said...

Sure. I notice the name of all sorts of programs. I don't think a
program name constitutes a claim. Mailwasher doesn't wash mail. Adobe
Acrobat doesn't turn somersaults. You and I use Outlook Express and it's
not very fast. Partition Magic actually works through prosaic and
mundane technology. Wordperfect has its faults and Microsoft Paint
doesn't contain anything wet.

lol

Too bad that this is a tad too long for four lines; this would have
been a great sig


Gabriele Neukam

(e-mail address removed)