HELP

Discussion in 'NOD32 version 2 Forum' started by Hugh, Jul 28, 2007.

Thread Status:
Not open for further replies.
  1. Hugh

    Hugh Registered Member

    Joined:
    Jan 25, 2007
    Posts:
    12
    Doing a PhD and I use Eve 2.5 from http://www.canexus.com/ to just check my citations. I have used it for years. However last year Nod started deleting it off my computer with this message

    Variant of Win32/IRCBot trojan found in operating memory. System memory infection originated from file C:\Program Files\EVE2.5\eve2.exe.

    Nod were helpful and eventually came to the conclusion that all was well and the whole thing stopped Today it started again I can get no help from Canexus and would change programs but at £100 I cannot afford to lose this if it is a false positive.

    Can some one advice - what is Win32/IRCBot trojan

    HUGH :eek:
     
  2. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    I did notice the following posted, about a month ago apparently, at the website you linked to:
    Have you done as suggested above?

    Blue
     
  3. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,654
    Location:
    Sydney, Australia
    Hugh,

    You should also send the file to the NOD32 guys so they can fix the false positive. I've done this myself before, and they dealt with it promptly.


    Mike
     
  4. Hugh

    Hugh Registered Member

    Joined:
    Jan 25, 2007
    Posts:
    12
    I think you are all wonderful to an OAP :D
     
  5. Hugh

    Hugh Registered Member

    Joined:
    Jan 25, 2007
    Posts:
    12
    Re:Happy

    Eve downloaded - and installed OK - Many many thanks :D
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Re: Happy

    If possible, please send the file flagged by NOD32 to samples[at]eset.com with this thread's url in the subject so that we can check it and rectify a possible fp.
     
Thread Status:
Not open for further replies.