Suggestions how to deal with this please

Discussion in 'malware problems & news' started by bgoodman4, Feb 15, 2012.

Thread Status:
Not open for further replies.
  1. bgoodman4

    bgoodman4 Registered Member

    Joined:
    Jan 13, 2009
    Posts:
    3,237
    I am not knowledgeable in this area but know enough to know I don't know enough, thats why I am posting this here.

    I ran an ESET scan and it did not identify these files as a problem but Zemana AntiMalware did. I asked Zemana to quarantine the first file and delete the 2nd. As you can see the delete failed. Any suggestions as to how to proceed now would be most appreciated.

    PS: I just re-ran Zemana AntiMalware and both files showed up again so the 1st one, which should have been quarantined, was not. Thats 2 issues to deal with then rather than 1.
     

    Attached Files:

    • 1.jpg
      1.jpg
      File size:
      55.1 KB
      Views:
      288
    Last edited: Feb 15, 2012
  2. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,146
    Well, win32k.sys is protected so it can't delete it. Maybe that's all it means?
     
  3. bgoodman4

    bgoodman4 Registered Member

    Joined:
    Jan 13, 2009
    Posts:
    3,237
    Thank you for your comment. Does this mean I should not worry about this item?
     
  4. kjdemuth

    kjdemuth Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    2,974
    Location:
    Boston, MA
    I would run a few more scans to determine if its a FP. Try a kaspersky and/or Dr web boot disk. Then after that update MBAM, kaspersky TDSS killer and Emsisoft kit and run them in safe mode. After that run hitman pro once on the desktop. This should find something. If not then you can try GMER and see if you find something odd.
     
  5. bgoodman4

    bgoodman4 Registered Member

    Joined:
    Jan 13, 2009
    Posts:
    3,237
    Thank you, I will try these.
     
  6. kjdemuth

    kjdemuth Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    2,974
    Location:
    Boston, MA
    Let us know how things turn out.
     
  7. AlexC

    AlexC Registered Member

    Joined:
    Apr 4, 2009
    Posts:
    1,288
    Try to choose "replace" instead of "delete". Reboot the system, and run the scan again.
     
  8. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses
    With the cavete that I am not an expert on Zemma I'd bet 99.999999 % it is a false positive on the part of the product.
    Eset is solid and did not confirm so forget it and move on with life.:cool:
     
  9. bgoodman4

    bgoodman4 Registered Member

    Joined:
    Jan 13, 2009
    Posts:
    3,237
    I tried a number of suggestions and none found any problem with the files so I will take Escaladers advice and not worry about it. Thanks for all suggestions and comments, most appreciated.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.