Prev: Can a USB port used by a printer be used for a scanner?
Next: printing with vuescan
From: Eric on 24 Jan 2008 14:09
Hello,

I was getting ready to set up my Visioneer 7100 on an old machine. I
downloaded the drivers from Visioneer's web site and my Avast
antivirus is squawking about there being a Trojan Horse. I then dug
around and found the CDROM that came with the scanner, Avast says that
the same Trojan, BMCentral, is on the disk as well!

I don't have another antivirus software to scan it with, but it
certainly looks like it's the real deal. Here are the entries from
the virus scan logs:

1/24/2008 1:33:27 PM 344 Sign of "Win32:Bmcentral-B [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE\%SYS%\BMUpdate.exe" file.
1/24/2008 1:35:38 PM 344 Sign of "Win32:Bmcentral [Trj]" has been
found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
\TWAIN_32\vizscan\7XXX\BMUInst.EXE" file.

I did find out a little bit about this trojan at Symmantec's website:

http://www.symantec.com/security_response/writeup.jsp?docid=2006-050915-3529-99&tabid=2

The file names they give don't match BMUInst.EXE, could this be a
false alarm?

-Eric
From: Barry Watzman on 24 Jan 2008 22:22
It could well be a false alarm. Lots of programs generate false alarms.
However, that doesn't mean that it IS a false alarm. Best to scan it
with other Virus checkers.


Eric wrote:
> Hello,
>
> I was getting ready to set up my Visioneer 7100 on an old machine. I
> downloaded the drivers from Visioneer's web site and my Avast
> antivirus is squawking about there being a Trojan Horse. I then dug
> around and found the CDROM that came with the scanner, Avast says that
> the same Trojan, BMCentral, is on the disk as well!
>
> I don't have another antivirus software to scan it with, but it
> certainly looks like it's the real deal. Here are the entries from
> the virus scan logs:
>
> 1/24/2008 1:33:27 PM 344 Sign of "Win32:Bmcentral-B [Trj]" has been
> found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
> \TWAIN_32\vizscan\7XXX\BMUInst.EXE\%SYS%\BMUpdate.exe" file.
> 1/24/2008 1:35:38 PM 344 Sign of "Win32:Bmcentral [Trj]" has been
> found in "I:\Documents\visioneer\Scansoft\Drivers\7100.exe\%WIN%
> \TWAIN_32\vizscan\7XXX\BMUInst.EXE" file.
>
> I did find out a little bit about this trojan at Symmantec's website:
>
> http://www.symantec.com/security_response/writeup.jsp?docid=2006-050915-3529-99&tabid=2
>
> The file names they give don't match BMUInst.EXE, could this be a
> false alarm?
>
> -Eric
 | 
Pages: 1
Prev: Can a USB port used by a printer be used for a scanner?
Next: printing with vuescan