PDA

View Full Version : VIRUS ALERT!! UnDetected by NOD32 = "Gforcefxupd.dll.vbs"


irizarisan
March 10th, 2009, 04:12 AM
NOD32 still haven't detected this virus file..

I had already logged a case on the support and got below case# 254154

Any of you encountered this type of virus also??

Marcos
March 10th, 2009, 04:21 AM
You're making a mountain out of a mole hill. It's just a trivial autorun VB script, easy to modify by children to avoid detection that disables registry tools and copies to removable media. Will be added to one of the upcoming updates.

irizarisan
March 10th, 2009, 04:30 AM
{QUOTE-> You're making a mountain out of a mole hill. It's just a trivial autorun VB script, easy to modify by children to avoid detection that disables registry tools and copies to removable media. Will be added to one of the upcoming updates. <-QUOTE}

hi Marcos,

Thanks a lot for the feedback.. Appreciate if this can be add on the next virus update and then the NOD32 can immediately detect and then remove the virus from the client system.

We will be monitoring it closely on our NOD32 Remote Admin Console.

YeOldeStonecat
March 10th, 2009, 06:47 AM
{QUOTE-> Appreciate if this can be add on the next virus update and then the NOD32 can immediately detect and then remove the virus from the client system.

We will be monitoring it closely on our NOD32 Remote Admin Console. <-QUOTE}

I never encountered this, but looked it up...and quickly found it's easy to manually clean/remove yourself. Can pretty much remove it from a system in the time it takes to type this post.

irizarisan
March 10th, 2009, 07:48 AM
Yup, this type of virus can easily be deleted once you are able to enable the folder options on the computer or run the system in safe mode.

My concern/request was to have this virus added in the virus definition in ESET to automatically delete this virus.

Removal of virus would be to easy for a technical Support like us. .however, for a normal users it would be to troublesome to have it dig it up and then manually delete it..

For security and for the purpose of anti-virus software, known threats of virus should be added immediately on the next update.

Balthazor
March 10th, 2009, 11:52 AM
As a symptom of this threat are you being restricted from viewing the folder options, by chance?

irizarisan
March 12th, 2009, 01:18 AM
yes, it restricts the user to view the folder options, task manager, system properties, computer management, etc.

Less
March 12th, 2009, 01:30 AM
{QUOTE-> You're making a mountain out of a mole hill. It's just a trivial autorun VB script, easy to modify by children to avoid detection that disables registry tools and copies to removable media. Will be added to one of the upcoming updates. <-QUOTE}

nothing wrong with the TS highlighting it.
Not everyone is a security or av expert.

if i am, i wont be bother with av software.