Virus Troj/Agent-EL 1

[cyberspace]

A colleague was playing a game on miniclip, when I was sent the following alert from Sophos AV:

Virus Troj/Agent-EL detected in:
"C:\Documents and Settings\GlynnBlackburn\Local Settings\Temporary Internet Files\Content.IE5\6MZU7QC4\miniclipGameLoader[1].dll"
Disinfection unavailable.

Should I worry about this? Sophos do no regard it as a high threat and it's came from a legit site?

Google searches arn't giving me any worrying information....

Any advice appreciated.

Ta

 

[erikhertzel]

I would go to an online scanner like Trend Micro's housecall:

http://housecall.trendmicro.com/housecall/start_corp.asp

I would make sure that the system is clean and I would worry that you are getting trojans coming from this domain. I would recommend not using this domain anymore.

Hope this helps,

Erik

 

[cyberspace]

Thanks for the tip.

However, miniclip is a legit site, i've used it for years.

There is a file called gameloader.dll which is used to execute code to load the games you play.

The rating for this seems low at every source I have looked at, I just find it strange that it's being considered a virus.

 

[2ffat]

Two things come to mind. First, the trojan that somehow infected that DLL may not have come from the site. The Trojan may have been picked up somewhere else and decided to infect that file on your computer.

Second, this may be a false positive. In addition to erikhertzel's suggestion, you can send in the file to Sophos and have them run it through their labs. If it really is infected, they will let you know. If it is a false positive, they will fix their AV identity and re-issue it.


James P. Cottingham
-----------------------------------------
^{I'm number 1,229!
I'm number 1,229!}

 

[cyberspace]

2ffat, that's great advice, I will do what you suggest at some point and post up the results!