anyone have an idea on this one?

[Robinb]

I checked a clients computer and found that AVG found on 4/1/4/07 which it
quantined a Trojanhorse Droppe.Agent.DHY in c:/windows/system32\~exe
I searched all over the internet and cannot find anything on this one.
I left it in the virus vault but was wondering if i can actually delete it
out.

any ideas?

robin

 

[Dave M]

Not sure if it's a typo in your OP, but the various aliases for this one
are listed here Robin. It apparently was added to AVG back in April, so
you might do some google snooping on the other names if you're not getting
enough appropriate hits.

http://vgrep.viruspool.net/virus.cms?id=172532

 

[Guest]

Check out the following link. It might be helpful.

http://www.sophos.com/security/analyses/trojdroppeblp.html

 

[Robinb]

sent an email to (e-mail address removed)- btw they do answer for the free version
since that is what he is running
this is the response and Dave it was not a typo- the file is
c:/windows\system32\~.exe (it does have it as ~.exe

Dear Sir/Madam,

Thank you for your email.

According to the suspicious file name, the file is not any essential part
of the operating system thus may be deleted. We would recommend you to move
this infected file to the Virus Vault.

Your PC will not infected anymore. If all your applications are working
properly and you are not missing any data file, you can safely delete this
file from AVG Virus Vault.

Please feel free to contact our technical support again.

Best regards,

Daniel Urminsky
AVG Technical Support