online scanner misses infection found by v4.2.64.12

Discussion in 'ESET NOD32 Antivirus' started by Mister Natural, Nov 10, 2010.

Thread Status:
Not open for further replies.
  1. Mister Natural
    Offline

    Mister Natural Registered Member

    I was given a laptop to work on and had a hard time getting any type of anti-malware to run on the system. Anything I tried would start to run, then stop, then give access denied errors when trying to re-run.

    I tried the eset online scanner and it was the only thing that would run, but found nothing. So I pulled the hard drive and scanned it from another pc running 4.2.64.12. cngaudit.dll was detected as infected and removed. Malwarebytes reported it as trojan.sirefef. Even after all that I still couldn't prevent it from coming back. I wound up re-partitioning, format and re-installed the OS.

    Just thought I'd pass along.
  2. Marcos
    Offline

    Marcos Eset Staff Account

    That sounds like a rootkit being normally active but inactive when the system booted from a clean drive.
  3. Mister Natural
    Offline

    Mister Natural Registered Member

    Yep that's what I figured too. As much as I like playing around trying to fix something like this, eventually I have to move on and stop wasting time with it.
Thread Status:
Not open for further replies.