An Accepted Solution is available for this post.
Is This A Legitimate Verizon System File, or a Malicious Worm ?
ChuckB
Enthusiast - Level 2
‎10-03-2010 09:37 AM

 

Vendor                Date                   Item

P2P.Dropper     10/3/2010           C:\program files (x86)\Verizon\offlineupdate\40bab39af6061c570000011ff6061cbb.exe

Malwarebytes found this on my system and quarantined it

0 Likes
Reply
2 Replies
An Accepted Solution is available for this post.
Re: Is This A Legitimate Verizon System File, or a Malicious Worm ?
Anti-Phish1
Master - Level 1
‎10-03-2010 09:59 AM

You don't need any VZ software on your system.

The file certainly appears to be either adware or malicious.

http://www.malwarebytes.org/malwarenet.php?name=P2P.Dropper

Reply
An Accepted Solution is available for this post.
Re: Is This A Legitimate Verizon System File, or a Malicious Worm ?
Mikede1
Enthusiast - Level 1
‎10-05-2010 12:36 PM

Just ran Malwarebytes at database version 4747 and the following infections were detected... Note that I use the verizon security suite products and it's antivirus did not detect this as an issue.  I did not run their spyware before I used Malwarebytes.  After quarantines everyting seems to be running OK as of now.

Files Infected:
C:\Program Files\Verizon\OfflineUpdate\40bab397f6061abb0000011ff6061ae0.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1011\A0148321.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1017\A0148537.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1021\A0148665.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1001\A0147564.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1003\A0147683.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1004\A0147746.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1027\A0149805.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1030\A0149941.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1031\A0150045.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1036\A0150541.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1039\A0150637.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1046\A0150878.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1049\A0151069.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1055\A0151452.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1007\A0147912.exe (P2P.Dropper) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1026\A0149662.exe (P2P.Dropper) -> Quarantined and deleted successfully.

 

Reply