PoeBot.Explorer

When I click on Autoexec.bat I receive a warning from Microsoft AntiSpyware as follows:

Microsoft AntiSpyware has detected the threat PoeBot.Explorer
trying to install a Script on your computer. If you would like to allow
PoeBot.Explorer to install the Script click the 'Allow' button below.

Name: PoeBot.Explorer
Type: Trojan
Threat Level: Severe

Description: PoeBot.Explorer is an IRC based Trojan Bot.

Advise: Severe-risk items have an extreme potential for adverse effect,
such as a security exploit, and should be removed.

About Trojan: A program that appears to be useful or harmless but that
contains hidden code designed to exploit or damage the system

When asked to remove and action is carried out a following folder is created in
C:\Program Files\Microsoft AntiSpyware\Quarantine
with the name of 6662050E-6EC5-4383-A417-FC4755 which is empty

As an experiment I created a new text document with nothing in it and renamed as "New Document.bat" and when I also clicked on it the whole process started again telling me I have a Trojan.

I have the latest McAfee AntiVirus software and Firewall also Checked with Adaware, Spybot and Spy Sweeper and none of these report this trojan and it appears that after searching the web for "PoeBot.Explorer" is does not exist also McAfee's library does not list it.

Can anybody help me do I have a Virus or is this false report from Microsoft and if it is a virus does anybody know how it can be removed manually.

Paul

 

I do think that is something of an overstatement when you have a user initiated file. I would click on allow and to remember it. I have had the same warning for using a BAT file to start up an old dos game.

 

Hi Did you run a Google search?

Check these links, this was just some that came up.
PoeBot

also

Might do some more checking?
Geri

 

I came to the conclusion that I do not have a Virus and it just Microsoft being over cautious for all of the wrong reasons so I have uninstalled it and when I click on a bat file I get the normal response "is not a valid win32 application" which you would expect to see.

I may reinstall when out of Beta and if it remains free, thanks for the feedback.

Paul