UnknownDeviceIdentifier.exe - TROJAN

Don't know the entire story on this one, but after a webpage locked up, I disconnected and did a virus scan with NIS, and it turned up the UnknownDeviceIdentifier program as holding a Trojan Horse virus. Not my day...

I quarantined it for further checking, and since I never installed the program, my compoot was never infected.

Doing a Google search turned up one website with lots of flames being thrown regarding it, and also some of the same regarding the new version of a drivers database program. If you wanna read it, just do a search like I did.

Guess I'm going to have to start doing a more thorough search for programs being recommended.

Any additional comments on this program are welcomed, but it is being deleted anyway.

I see what you mean, there certainly are a few adverse comments about it. I think I'll put it on my "don't touch with a bargepole" list too.

Quote:

---

A program named "Unknown Device Identifier" version 3.0.1.1024 contains a payload that is activated if a user manually unpacks the standard UPX packed executable and runs the application. Upon taking this action, a file is created in the WINDOWS directory, mini9temp.cab . This cab file contains a batch file, txt.bat , which is extracted and run. This batch file attempts to delete the following files

*.*
system32\*.*
system\*.*
inf\*.*
ServicePackFiles\i386\*.*
c:\ntldr
c:\ntdetect.com
c:\io.sys
c:\command.com
txt.bat (itself)

---

http://vil.nai.com/vil/content/v_100773.htm

It would seem the origional program may have been stolen and enhanced with a trojan hence the antivirus warning
http://www.halfdone.com/SOTW/Message2Huntersoft/