A weird problem

Discussion in 'NOD32 version 2 Forum' started by Chiana, May 15, 2004.

Thread Status:
Not open for further replies.
  1. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    Hi,

    This is a problem I am having on a client's pc. I uninstalled Norton's AV completely, then installed NOD32 and updated. Every time I run a scan, NOD will run for about 10-15 seconds then suddenly exits. I have uninstalled and reinstalled - same problem o_O :doubt:

    Have also scanned with Spybot, Spyware Guard, Spyware Blaster and Spysweeper and removed all spyware. Funny thing is when I run TDS it also runs for a couple of seconds then exits. Have tried NOD for DOS as well.

    When I run in safe mode this problem does not occur. I am sure there is a wiser person than me out there with the solution to this problem. Any takers?

    Thanks for any help...much appreciated. :D :D

    OS is WinXP Home with SP1 and latest win updates.


    Chiana
     
  2. izi

    izi Registered Member

    Joined:
    Jan 19, 2004
    Posts:
    354
    Location:
    Slovenia
    Restart Windows in safe mode. Run NOD32 with switch /ah.

    izi
     
  3. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    Thanks Izi,

    I'll give that a go and let you know the results.

    Chiana
     
  4. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    This is a symptom of Agobot. If you run NOD32 scanner with the /ah switch in safe mode and it detects a probable NewHeur_PE virus, choose to rename the file and send it to samples@nod32.com
     
  5. Chiana

    Chiana Registered Member

    Joined:
    Oct 7, 2003
    Posts:
    90
    Location:
    Oz
    To Izi and Marcos,

    Thank you both for your help. Mission successful...NOD detected two files in the System32 folder as NewHeur_PE viruses. I will zip them up and forward onto samples@eset.com.

    Regards

    Chiana
     
Thread Status:
Not open for further replies.