Cant delete

Discussion in 'NOD32 version 2 Forum' started by Sweetie(*)(*), Sep 12, 2004.

Thread Status:
Not open for further replies.
  1. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    Hi i was fixing a friends pc today, he managed to get a ton of trojans, dont ask how......lol

    anyway nod32 said there is a trojan in operating memory and can not be deleted, it started out being Trojan downloader Agent BF and then

    C:\callpall.chm>>.CHM>>/htm2chm_explorer-exploit/codebasedtrojan
    C:\callpall.chm>>.CHM>>/1.htm_explorer-exploit/codebasedtrojan

    i can quarantine but not delete these but there is also an active one.
    nod32 also picked up multiple infiltraitions in Recycler.

    his system as i tested it : win xp pro sp1 [not fully patched, unable to access winupdate]
    nod32 2.12.2 trial
    adaware se
    spybot 1.3

    i also tried to scan in safe mode but had same problem.
    how can u delete somrthing from operating memory?

    thanks.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    Since chm files are actually archives, look up the particular file through a file manager or Windows Explorer and delete them manually.
     
  3. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    ok i will get him to try that thank you
     
  4. Sweetie(*)(*)

    Sweetie(*)(*) Registered Member

    Joined:
    Aug 10, 2004
    Posts:
    419
    Location:
    Venus
    oh and by the way symantec online scan gave his system a clean bill of health,
    nod32 found 11 trojans.
     
  5. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    As Nod32 Quarantined the files in question, can you send the files found in the quarantine folder C> Program Files> Nod32> infected as an attachment to samples@nod32.com

    If you do not hear from Eset within 3 days (allows for weekends), please advise us here...

    Let us know how you go…

    Cheers :D
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,376
    Blackspear,
    Sweetie had written that NOD detected 11 trojans which were not picked up by NAV. Therefore, it's not necessary to send them to Eset for analysis.
     
  7. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Sorry about that, must have read it wrong ;)

    Cheers :D
     
Thread Status:
Not open for further replies.