E
Eric
Hello,
I was getting ready to set up my Visioneer 7100 on an old machine. I
downloaded the drivers from Visioneer's web site and my Avast
antivirus is squawking about there being a Trojan Horse. I then dug
around and found the CDROM that came with the scanner, Avast says that
the same Trojan, BMCentral, is on the disk as well!
I don't have another antivirus software to scan it with, but it
certainly looks like it's the real deal. Here are the entries from
the virus scan logs:
1/24/2008 1:33:27 PM 344 Sign of "Win32:Bmcentral-B [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE\%SYS%\BMUpdate.exe" file.
1/24/2008 1:35:38 PM 344 Sign of "Win32:Bmcentral [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE" file.
I did find out a little bit about this trojan at Symmantec's website:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-050915-3529-99&tabid=2
The file names they give don't match BMUInst.EXE, could this be a
false alarm?
-Eric
I was getting ready to set up my Visioneer 7100 on an old machine. I
downloaded the drivers from Visioneer's web site and my Avast
antivirus is squawking about there being a Trojan Horse. I then dug
around and found the CDROM that came with the scanner, Avast says that
the same Trojan, BMCentral, is on the disk as well!
I don't have another antivirus software to scan it with, but it
certainly looks like it's the real deal. Here are the entries from
the virus scan logs:
1/24/2008 1:33:27 PM 344 Sign of "Win32:Bmcentral-B [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE\%SYS%\BMUpdate.exe" file.
1/24/2008 1:35:38 PM 344 Sign of "Win32:Bmcentral [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE" file.
I did find out a little bit about this trojan at Symmantec's website:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-050915-3529-99&tabid=2
The file names they give don't match BMUInst.EXE, could this be a
false alarm?
-Eric