View Full Version : Win32/PSW.OnlineGames.NMY trojan
viking1
January 22nd, 2009, 11:32 AM
I have a threat detected on my PC and nod32 eset smart security show it like this
object:
C:\autorun.inf
Threat:
Win32/PSW.OnlineGames.NMY trojan
Information:
cleaned by deleting - quarantined
and the trojan is yet still playing and annoying on my PC
Note: This trojan stopped the update function in My nod32 eset smart security
so please help what should I do ?????!!!!!!!
Marcos
January 22nd, 2009, 12:17 PM
-{ Quote: "I have a threat detected on my PC and nod32 eset smart security show it like this
" }-
First of all, remove any removable devices (e.g. usb sticks, memory cards, etc.). Look into the file C:\autorun.inf and put down the file name listed at the line commencing with "shell\open\command=".
Look up and rename that file and restart the computer.
Send the file you've previously renamed in a password protected archive and this thread's url in the subject to samples[at]eset.com.
viking1
January 23rd, 2009, 06:53 AM
Thanks a lot Mr Marcos but all I need an affective removal tool which delete win32 forever
and then I want a solution to the update issue
Thanks a lot
SternMan
January 23rd, 2009, 08:03 AM
viking1 try to use this tool!
~Removed unknown exe program.~
ronjor
January 23rd, 2009, 08:22 AM
An ESET moderator has responded in this thread. No additional help is needed.
In addition, do not post unknown executable files on the forums for any reason.
Marcos
January 23rd, 2009, 08:49 AM
-{ Quote: "Thanks a lot Mr Marcos but all I need an affective removal tool which delete win32 forever
and then I want a solution to the update issue
Thanks a lot" }-
Please do as I suggested so that we can assist you further in removing the threat.
viking1
January 25th, 2009, 01:46 AM
I tried to look into autorun.inf yesterday evening but i couldn't find it so is there another solution and please be advised that I enabled the showing hidden files
I'm waiting for your reply
viking1
January 28th, 2009, 01:51 AM
what happened??!!! why you don't reply
is that possible eset smart security doesn't have the solution ???!!!!
Pls advise me if is there any removal tool for win32/psw.onlinegames.nmy and its branches
I'm waiting for your reply
xMarkx
January 29th, 2009, 06:47 PM
Hello,
Perhaps you could try disabling system restore, downloading and installing an antimalware application and then running it in safe mode.
Everyone on these forums appears to recommended AntiMalwareBytes (www.malwarebytes.org). I myself have never used it, because I have never had to, but I've heard it's really good at removing things that EAV/ESS sometimes can't.
Regards,
Mark.
PaulB2005
January 30th, 2009, 02:54 AM
-{ Quote: "Perhaps you could try disabling system restore" }-
Please don't do that. If you accidentally trash the system how can you go back? Better to restore to an infected system than not be able to go back at all.
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums