Today my Avira Antivirus Premium found the Trojan in:
mysql5.051b-win32.zip file.
I am nearly certain that this file was downloaded a couple weeks ago from the Xampp site as part of the down load package that contained Apache, MySQL, and php software.
The appropriate excerpt from this scan is shown below:
**************From Avira Report************
C:\My Downloads\mysql-5.0.51b-win32.zip
[0] Archive type: ZIP
--> Setup.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[NOTE] The file was moved to '48f22a70.qua'!
End of the scan: Thursday, July 17, 2008 12:51
Used time: 51:38 min
The scan has been done completely.
8335 Scanning directories
371367 Files were scanned
1 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
0 files were deleted
0 files were repaired
2 files were moved to quarantine
Please tell me what if anything you know about this and what effect it might have on my system, that has been acting strange for a couple weeks now.
Thomas