Apache Friends Support Forum

Today my Avira Antivirus Premium found the Trojan in:

mysql5.051b-win32.zip file.

I am nearly certain that this file was downloaded a couple weeks ago from the Xampp site as part of the down load package that contained Apache, MySQL, and php software.

The appropriate excerpt from this scan is shown below:

**************From Avira Report************

C:\My Downloads\mysql-5.0.51b-win32.zip
[0] Archive type: ZIP
--> Setup.exe
[DETECTION] Is the Trojan horse TR/Dropper.Gen
[NOTE] The file was moved to '48f22a70.qua'!


End of the scan: Thursday, July 17, 2008 12:51
Used time: 51:38 min

The scan has been done completely.

8335 Scanning directories
371367 Files were scanned
1 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
0 files were deleted
0 files were repaired
2 files were moved to quarantine

Please tell me what if anything you know about this and what effect it might have on my system, that has been acting strange for a couple weeks now.

Thomas

I don't think "mysql5.051b-win32.zip" is part of a XAMPP package which you can download at "http://www.apachefriends.org/en/xampp-windows.html".

You are probably right:

I found mysql-50.51b-win32.zip file in the downloads from a Sun Mirror and downloaded another copy. It was Virus/Trojan Free. But I am not sure where I downloaded the first one from. Regardless it is trashed

It's good to know it was not an XAMPP file.

Thanks for the response.