Trojan horse Downloader.Agent.2.F

  • Thread starter Thread starter Jan den Hollander
  • Start date Start date
J

Jan den Hollander

AVG scanned my hard drive and said that a file
WINNT\SYSTEM32\MCIWAVE.EXE was infected with this. The question I have
is this: Is this a legitimate file for Windows 2000 or not? I searched
the internet, and I found some conflicting remarks on this; some felt:
good riddance!, others felt that AVG was mistaken about this one

any insight in this is appreciated,

Jan
 
Hmmm nothing on google.

If it has a virus then let AVG try to repair or if that fails quarantine it.
Personally, I wouldn't hesitate to delete it as since it implies it is to do
with WAV files and is obviously not a core windows system32 file --> delete.

There is no mciwave.ex? on the Windows 2000 Pro installation CD so if this
is a real program (or once was) then if you rename, quarantine, or delete it
something is bound to complain later giving you the opportunity to reinstall
it.

- Tim
 
I see on my computer a mciwave.dll and mciwave.drv no .exe. If files are critical to
your operating system you can restore them with System File Checker as in sfc
/scannow. It looks like the legitimate files are driver files. I would go ahead and
quarantine or rename it. I have never seen a process that uses that file to indicate
it is crucial to the operating system. If renaming it does no harm to operation of
your operating system, then delete it. Sfc is best used on SP4 computers as running
it on earlier versions can delete hotfix files. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;222471
 
Back
Top