online scanner misses infection found by v4.2.64.12

Discussion in 'ESET NOD32 Antivirus' started by Mister Natural, Nov 10, 2010.

Thread Status:
Not open for further replies.
  1. Mister Natural

    Mister Natural Registered Member

    Joined:
    May 10, 2007
    Posts:
    225
    Location:
    3rd density St. Louis
    I was given a laptop to work on and had a hard time getting any type of anti-malware to run on the system. Anything I tried would start to run, then stop, then give access denied errors when trying to re-run.

    I tried the eset online scanner and it was the only thing that would run, but found nothing. So I pulled the hard drive and scanned it from another pc running 4.2.64.12. cngaudit.dll was detected as infected and removed. Malwarebytes reported it as trojan.sirefef. Even after all that I still couldn't prevent it from coming back. I wound up re-partitioning, format and re-installed the OS.

    Just thought I'd pass along.
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,415
    That sounds like a rootkit being normally active but inactive when the system booted from a clean drive.
     
  3. Mister Natural

    Mister Natural Registered Member

    Joined:
    May 10, 2007
    Posts:
    225
    Location:
    3rd density St. Louis
    Yep that's what I figured too. As much as I like playing around trying to fix something like this, eventually I have to move on and stop wasting time with it.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.