Executable file w/ Trojan Horse

My Trend Micro software identified "avtmd.exe" as having
a trojan horse that was identified on 1/1/2009 in the process
of doing a full computer scan. My Vista software seems to
work O.K. The file was quarantined, and, when I tried to
clean it, it said that it couldn't be done. They recommended
waiting to some future security update.

Does anyone know what this file is supposed to do? Is it
possible to go to the Microsoft site and download this
executable again and delete the original version that is now
corrupted?
--
bookie in Md.

Before you go about trying to download a bad file why don't you just type
the file name in Google search, as I just did.

Then you will see that you DO NOT want to download this file.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"bookie" <> wrote in message
news:00DF6348-A49C-4C55-B8CE-...
> My Trend Micro software identified "avtmd.exe" as having
> a trojan horse that was identified on 1/1/2009 in the process
> of doing a full computer scan. My Vista software seems to
> work O.K. The file was quarantined, and, when I tried to
> clean it, it said that it couldn't be done. They recommended
> waiting to some future security update.
>
> Does anyone know what this file is supposed to do? Is it
> possible to go to the Microsoft site and download this
> executable again and delete the original version that is now
> corrupted?
> --
> bookie in Md.

Hi Richard,

Thank you! I use Google most of the time, but I didn't think of it in
this case. I went there, and I was surprised about all of the links
to the executable in question.

I activated my Trend Micro via the icon, and I deleted this file.

Regards,

Bookie
--
bookie in Md.


"Richard Urban" wrote:

> Before you go about trying to download a bad file why don't you just type
> the file name in Google search, as I just did.
>
> Then you will see that you DO NOT want to download this file.
>
> --
>
> Richard Urban
> Microsoft MVP
> Windows Desktop Experience
>
>
> "bookie" <> wrote in message
> news:00DF6348-A49C-4C55-B8CE-...
> > My Trend Micro software identified "avtmd.exe" as having
> > a trojan horse that was identified on 1/1/2009 in the process
> > of doing a full computer scan. My Vista software seems to
> > work O.K. The file was quarantined, and, when I tried to
> > clean it, it said that it couldn't be done. They recommended
> > waiting to some future security update.
> >
> > Does anyone know what this file is supposed to do? Is it
> > possible to go to the Microsoft site and download this
> > executable again and delete the original version that is now
> > corrupted?
> > --
> > bookie in Md.
>
>

You can use Google to check up on almost any file or extension. In most
cases you will be able to determine what the file/ext is for. If a file does
NOT get any hits it is likely a new file that is part of a malware package.

--

Richard Urban
Microsoft MVP
Windows Desktop Experience


"bookie" <> wrote in message
news:0179CC65-E279-48A6-9F65-...
> Hi Richard,
>
> Thank you! I use Google most of the time, but I didn't think of it in
> this case. I went there, and I was surprised about all of the links
> to the executable in question.
>
> I activated my Trend Micro via the icon, and I deleted this file.
>
> Regards,
>
> Bookie
> --
> bookie in Md.
>
>
> "Richard Urban" wrote:
>
>> Before you go about trying to download a bad file why don't you just type
>> the file name in Google search, as I just did.
>>
>> Then you will see that you DO NOT want to download this file.
>>
>> --
>>
>> Richard Urban
>> Microsoft MVP
>> Windows Desktop Experience
>>
>>
>> "bookie" <> wrote in message
>> news:00DF6348-A49C-4C55-B8CE-...
>> > My Trend Micro software identified "avtmd.exe" as having
>> > a trojan horse that was identified on 1/1/2009 in the process
>> > of doing a full computer scan. My Vista software seems to
>> > work O.K. The file was quarantined, and, when I tried to
>> > clean it, it said that it couldn't be done. They recommended
>> > waiting to some future security update.
>> >
>> > Does anyone know what this file is supposed to do? Is it
>> > possible to go to the Microsoft site and download this
>> > executable again and delete the original version that is now
>> > corrupted?
>> > --
>> > bookie in Md.
>>
>>

I printed out your response, and it was really very valuable to me.
I guess that I sometimes get blinders on and can't really see things
like you had.

Best regards,
--
bookie in Md.


"Richard Urban" wrote:

> You can use Google to check up on almost any file or extension. In most
> cases you will be able to determine what the file/ext is for. If a file does
> NOT get any hits it is likely a new file that is part of a malware package.
>
> --
>
> Richard Urban
> Microsoft MVP
> Windows Desktop Experience
>
>
> "bookie" <> wrote in message
> news:0179CC65-E279-48A6-9F65-...
> > Hi Richard,
> >
> > Thank you! I use Google most of the time, but I didn't think of it in
> > this case. I went there, and I was surprised about all of the links
> > to the executable in question.
> >
> > I activated my Trend Micro via the icon, and I deleted this file.
> >
> > Regards,
> >
> > Bookie
> > --
> > bookie in Md.
> >
> >
> > "Richard Urban" wrote:
> >
> >> Before you go about trying to download a bad file why don't you just type
> >> the file name in Google search, as I just did.
> >>
> >> Then you will see that you DO NOT want to download this file.
> >>
> >> --
> >>
> >> Richard Urban
> >> Microsoft MVP
> >> Windows Desktop Experience
> >>
> >>
> >> "bookie" <> wrote in message
> >> news:00DF6348-A49C-4C55-B8CE-...
> >> > My Trend Micro software identified "avtmd.exe" as having
> >> > a trojan horse that was identified on 1/1/2009 in the process
> >> > of doing a full computer scan. My Vista software seems to
> >> > work O.K. The file was quarantined, and, when I tried to
> >> > clean it, it said that it couldn't be done. They recommended
> >> > waiting to some future security update.
> >> >
> >> > Does anyone know what this file is supposed to do? Is it
> >> > possible to go to the Microsoft site and download this
> >> > executable again and delete the original version that is now
> >> > corrupted?
> >> > --
> >> > bookie in Md.
> >>
> >>
>
>