Menu

Trojans in Plugins

2008-10-03
2012-11-14
  • Cornelis Kuit

    Cornelis Kuit - 2008-10-03

    Hi, All
    How come I find 2 Trojans/Viruses in Notepad++ V5.0.3:
    1. ComparePlugin.dll Worm : DroppedWin32.Stration.EM and
    2. Spellchecker.dll : Trojan: Win32.Obfuscated.ex

    both found with: Virus.utilities - Ikarus
    Anybody have an idea why there are viruses in these Dll's and what should I do with these 2 dll's.
    Can they do any harm? Someone noticed this before ? My virus.utilities both will have them dropped!
    Any answers most appreciated.
    Regards C. Kuit

     
    • Cornelis Kuit

      Cornelis Kuit - 2008-10-03

      Follow-up explanation:

      I found that this only happens on the Notepad++ V5.0.3 Portable Edition.
      Another Trojan appears to be in the temp file e.g. \Temp\nsy1C3.tmp whiel I am working in Notepad++
      Here a Trojan.Win32Agent. muq is being displayed in my virus.utilities.
      Regards C. Kuit

       
      • Daniel Spawn

        Daniel Spawn - 2008-10-03

        Portable Edition downloaded from where?