PDA

View Full Version : NOD32 question and help needed plz!


SonyaM32
July 27th, 2005, 10:47 PM
Hi,
Maby the NOD32 people or someone can help me. I read somewhere , to post here if someone has NOD32 and also has this problem. I have another post, but it's somewhere else on here ::) I did an ewido online scan, and a regular scan, and it found the below. It fixes them, but then with the next scan, it finds them again. Do I need to do the restore off scan? And if so, can someone plz direct me to those instructions?
Thanks

-{ Quote: " ewido security suite online scanner
http://www.ewido.net
__________________________________________________


Name: TrojanDownloader.Swizzor.bo
Path: [340] C:\DOCUME~1\sonya\APPLIC~1\CASTID~1\DoesFour.exe
Risk: High

Name: Spyware.Cookie.Doubleclick
Path: :mozilla.26:C:\Documents and Settings\sonya\Application Data\Mozilla\Profiles\default\kle7cb79.slt\cookies.txt
Risk: Medium" }-

-{ Quote: " ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 8:28:49 PM, 7/27/2005
+ Report-Checksum: C7493FFD

+ Scan result:

[340] C:\DOCUME~1\sonya\APPLIC~1\CASTID~1\DoesFour.exe -> TrojanDownloader.Swizzor.bo : Cleaned with backup
[2376] C:\DOCUME~1\sonya\APPLIC~1\CASTID~1\DoesFour.exe -> TrojanDownloader.Swizzor.bo : Error during cleaning
:mozilla.26:C:\Documents and Settings\sonya\Application Data\Mozilla\Profiles\default\kle7cb79.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup


::Report End" }-

webyourbusiness
July 27th, 2005, 11:35 PM
this isn't a nod32 issue - it's a general trojan/downloader issue...

I found some removal instructions here:

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453088693

You should be able to trust the instructions, they are from CA.com - but I would suggest adding this item to a submission so that Eset can add it to the definitions files.

NOD32 Control Center | NOD32 System Tools | Quarantine | Submit for Analysis

regards

Greg

SonyaM32
July 28th, 2005, 12:24 AM
-{ Quote: "this isn't a nod32 issue - it's a general trojan/downloader issue...

I found some removal instructions here:

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453088693

You should be able to trust the instructions, they are from CA.com - but I would suggest adding this item to a submission so that Eset can add it to the definitions files.

NOD32 Control Center | NOD32 System Tools | Quarantine | Submit for Analysis

regards

Greg" }-
Thank you Greg! There is also instructions on here that Blackspear made. Do you have any idea where it is?
Thanks again :)

Blackspear
July 28th, 2005, 12:38 AM
-{ Quote: "There is also instructions on here that Blackspear made. Do you have any idea where it is?" }-For Nod32 users, see post number 2 in this thread. (http://www.wilderssecurity.com/showthread.php?t=47830)

Hope this helps...

Let us know how you go.

Cheers ;D

SonyaM32
July 28th, 2005, 12:40 AM
Thank you Blackspear! :) I searched all over here for that ;D

Blackspear
July 28th, 2005, 12:54 AM
-{ Quote: "Thank you Blackspear! :) I searched all over here for that ;D" }-My pleasure ;D

Cheers ;D