Developer notes:
C:\Trojan\wind.dll is non-repairable threat. NAV with the latest beta definition detects this. Please delete this file and replace it if neccessary. Please follow the instruction at the end of this email message to install the latest beta definitions.
C:\Trojan\users.dll is a clean file.
C:\Trojan\restart.exe is a clean file.
C:\Trojan\nhtml.dll is a clean file.
C:\Trojan\moo.dll is a clean file.
C:\Trojan\lsass.exe The submitted program is an mIRC client software. It is not malicious itself. However, if it is driven by the malicious scripts, it can be used in malicious purposes (e.g., as a Backdoor.Trojan). If you do not use it as an mIRC client, we recommend you to delete this file.
C:\Trojan\Libparse.exe is a clean file.
C:\Trojan\ipservers.dll is a clean file.
C:\Trojan\empavms.exe This utility performs no malicious actions. However, it may be used by trojans to hide application windows. If you do not use this program, we would recommend you to delete it.
C:\Trojan\boot.exe This utility is nonmalicious; however, it could be used by an intruder who has gained access to your system. If you do not use this program, we recommend that you delete it.
Symantec Security Response has determined that the sample(s) that you provided are infected with a virus, worm, or Trojan. We have created beta definitions that will detect this threat. Please follow the instruction at the end of this email message to download and install the latest beta definitions.
Downloading and Installing Beta Definition Instructions:
1. Open your Web browser. If you are using a dial-up connection, connect to any Web site, such as:
http://securityresponse.symantec.com/
2. Click this link to the ftp site:
ftp://ftp.symantec.com/public/englis...tadefsi32.exe. If it does not go to the site (this could take a minute or so if you have a slow connection), copy and paste the address into the address bar of your Web browser and then press Enter.
3. When a download dialog box appears, save the file to the Windows desktop.
4. Double-click the downloaded file and follow the prompts.