Trojan.Dropper/Multi-MBAD F/P?

[Jahn]

C:\windows\mota113.exe

6/31 at VT, mostly suspicious.

File sent to nicks.

Thanks

SAS 4.1.1040 Defs 3458/1449

[jmet]

I am getting the same thing, turned up suddenly as I have SAS run every night and this started popping up a day or two ago. I ran 5 other scanners none of which see it.

[SUPERAntiSpy]

What address did you send the file to? Did you send to samples AT superantispyware.com?

[Jahn]

What address did you send the file to? Did you send to samples AT superantispyware.com?

OK, I see you received it now.

[Nightcap]

My scan found two entries today. Besides MOTA113.EXE it reported DTSX264.EXE. As far as I know that file is part of the DTS X264 video codec?

Trojan.Dropper/Multi-MBAD

C:\WINDOWS\MOTA113.EXE

C:\WINDOWS\SYSTEM32\DTSX264.EXE

The samples will be mailed for evaluation after completing this post.

Nightcap

[SUPERAntiSpy]

My scan found two entries today. Besides MOTA113.EXE it reported DTSX264.EXE. As far as I know that file is part of the DTS X264 video codec?

Trojan.Dropper/Multi-MBAD

C:\WINDOWS\MOTA113.EXE

C:\WINDOWS\SYSTEM32\DTSX264.EXE

The samples will be mailed for evaluation after completing this post.

Nightcap

Thank you!

[Jahn]

Defs 3459/1450 no longer detect it.

Thank you.

[Nightcap]

Same here for my two files!

Thank you for a great product and a great team.

[SUPERAntiSpy]

Thank you for your support and letting us know