A weird problem

Discussion in 'NOD32 version 2 Forum' started by Chiana, May 15, 2004.

Thread Status:
Not open for further replies.
  1. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    Hi,

    This is a problem I am having on a client's pc. I uninstalled Norton's AV completely, then installed NOD32 and updated. Every time I run a scan, NOD will run for about 10-15 seconds then suddenly exits. I have uninstalled and reinstalled - same problem o_O :doubt:

    Have also scanned with Spybot, Spyware Guard, Spyware Blaster and Spysweeper and removed all spyware. Funny thing is when I run TDS it also runs for a couple of seconds then exits. Have tried NOD for DOS as well.

    When I run in safe mode this problem does not occur. I am sure there is a wiser person than me out there with the solution to this problem. Any takers?

    Thanks for any help...much appreciated. :D :D

    OS is WinXP Home with SP1 and latest win updates.


    Chiana
     
  2. izi

    izi Registered Member

    Joined:
    Jan 19, 2004
    Posts:
    354
    Location:
    Slovenia
    Restart Windows in safe mode. Run NOD32 with switch /ah.

    izi
     
  3. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    Thanks Izi,

    I'll give that a go and let you know the results.

    Chiana
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    This is a symptom of Agobot. If you run NOD32 scanner with the /ah switch in safe mode and it detects a probable NewHeur_PE virus, choose to rename the file and send it to samples@nod32.com
     
  5. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    To Izi and Marcos,

    Thank you both for your help. Mission successful...NOD detected two files in the System32 folder as NewHeur_PE viruses. I will zip them up and forward onto samples@eset.com.

    Regards

    Chiana
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.