Found possible trojan-dropper Nod32 doesn't detect?

Discussion in 'ESET NOD32 Antivirus' started by strwberryiqourcake, Aug 5, 2012.

Thread Status:
Not open for further replies.
  1. strwberryiqourcake

    strwberryiqourcake Registered Member

    Joined:
    Nov 13, 2010
    Posts:
    17
    I came across some inf files on my computer (oem5.pnf, oem4.pnf) and checked with google out of curiosity. Immediately I got this hit for http://www.microsoft.com/security/p...a/Entry.aspx?Name=TrojanDropper:Win32/Resmu.A which talks about a Trojan dropper.

    I immediately searched for these files on my cimputer:
    srenum.sys OR oem4.inf OR oem4.PNF OR oem5.inf OR oem5.PNF OR ndisrd.sys OR ndisrd.inf OR ndisrd_m.inf OR snetcfg.exe OR drvsign.exe

    This is the result:
    http://i45.tinypic.com/21m9aut.jpg

    I scanned with Nod32 v4 and the latest updates. But Nod32 doesn't detect the trojan dropper nor any rootkits.. What would you guys suggest I do now. Should I worry or is it nothing?

    I use Windows7 64, Nod32 V4.2
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    Oem*.inf/pnf are not an indicator of an infection, they are mainly used for legit purposes. You can upload the suspicious files to VirusTotal to find out if they are detected by some other vendors.
     
  3. strwberryiqourcake

    strwberryiqourcake Registered Member

    Joined:
    Nov 13, 2010
    Posts:
    17
    Sorry I didn't know I should've checked with virustotal first. It does makes sense. Sorry to have bothered you.
     
  4. King Grub

    King Grub Registered Member

    Joined:
    Sep 12, 2006
    Posts:
    818
    I have all those as well, same location, on a guaranteed clean system.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.