online scanner misses infection found by v4.2.64.12

Discussion in 'ESET NOD32 Antivirus' started by Mister Natural, Nov 10, 2010.

Thread Status:
Not open for further replies.
  1. Mister Natural

    Mister Natural Registered Member

    Joined:
    May 10, 2007
    Posts:
    225
    Location:
    3rd density St. Louis
    I was given a laptop to work on and had a hard time getting any type of anti-malware to run on the system. Anything I tried would start to run, then stop, then give access denied errors when trying to re-run.

    I tried the eset online scanner and it was the only thing that would run, but found nothing. So I pulled the hard drive and scanned it from another pc running 4.2.64.12. cngaudit.dll was detected as infected and removed. Malwarebytes reported it as trojan.sirefef. Even after all that I still couldn't prevent it from coming back. I wound up re-partitioning, format and re-installed the OS.

    Just thought I'd pass along.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,332
    That sounds like a rootkit being normally active but inactive when the system booted from a clean drive.
     
  3. Mister Natural

    Mister Natural Registered Member

    Joined:
    May 10, 2007
    Posts:
    225
    Location:
    3rd density St. Louis
    Yep that's what I figured too. As much as I like playing around trying to fix something like this, eventually I have to move on and stop wasting time with it.
     
Thread Status:
Not open for further replies.