PDA

View Full Version : Nod32 SS not working 100%


RoyalMess
October 27th, 2008, 11:11 AM
Everytime i boot my PC i get a message that infected files have been quarantained.
27-10-2008 16:01:34 Real-time file system protection file C:\WINDOWS\system32\ svchosthk.dll Win32/Spy.PerfKey.NAA trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\ svchost.exe.
27-10-2008 16:01:34 Real-time file system protection file C:\WINDOWS\system32\ svchostwb.dll Win32/Spy.PerfKey.NAA trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\ svchost.exe.
27-10-2008 16:01:33 Real-time file system protection file C:\WINDOWS\system32\ svchostr.exe Win32/Spy.PerfKey.NAA trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\ svchost.exe.
But since i started getting these messages i booted my PC in safe mode scanned my PC no threats found scanned in normal no threats found.
And i can't rightclick a file/folder also to scan it seperatly, which i first could.

SternMan
October 27th, 2008, 12:51 PM
RoyalMess Scan system in safe mode, the program CureIT (ftp://ftp.drweb.com/pub/drweb/cureit/launch.exe)

Marcos
October 27th, 2008, 01:08 PM
The right tool to use is ESET SysInspector. You can download it here (http://download.eset.com/download/sysinspector/32/ENU/SysInspector.exe). Please run it, save the log (File -> Save log) and send it to samples[at]eset.com with this thread's url in the subject.