trojan in system32 ????

Discussion in 'NOD32 version 2 Forum' started by greenfly, Apr 8, 2007.

Thread Status:
Not open for further replies.
  1. greenfly

    greenfly Registered Member

    Joined:
    Dec 18, 2006
    Posts:
    43
  2. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    Reboot, seems like someof those log entries say the trojan will be deleted on rebooting. You should also try running the scan in safe mode, that makes it easier as not as many processes load and our easier to delete
     
  3. greenfly

    greenfly Registered Member

    Joined:
    Dec 18, 2006
    Posts:
    43
    I have do that---nothing
     
  4. Get

    Get Guest

    Best is to become a member here and post a Hijackthislog.
     
  5. greenfly

    greenfly Registered Member

    Joined:
    Dec 18, 2006
    Posts:
    43
    GET

    the guys here are too kind an helpful....They've helped me many time....:rolleyes:

    I have made a Hijack-thing...check the file for delete,,but they appear againo_O!!!o_O
     
  6. ASpace

    ASpace Guest

    Hello Greenfly .


    • Make sure your definition is up-to-date by pressing Control Center -> Update -> Update now.
    • Make sure your settings are the same as this tutorial.
    • Boot in Safe Mode
    • Open NOD32's on-demand scanner from Start -> Programs-> ESET ->NOD32 ,make sure you use Control Center profiles and perforum full Scan&Clean over your hard drives . NOD32 will take care of these threats

    You can also use Ewido Micro for second opinion


    If this still doesn't help , can you please also send a HijackThis log file to ESET Tech Support (support[at]eset.com) along with more information and a link to this thread.You might have something like trojan-downloader/dropper undetected by NOD32 . Let us know how you go. :thumb:

    Email address edited to prevent it from being harvested by robots
     
    Last edited by a moderator: Apr 9, 2007
  7. Get

    Get Guest

    Yes, but you shouldn't use hjt yourself. Post a log in a forum like CastleCops and people there will tell you what to do and that's in this case a lot more then just click "Fix" :), but by all means do it the way other wilders-people tell you if that makes you feel more comfortable.;)
     
  8. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    Official complaint:

    Posting pictures from other sites
     
  9. clicx

    clicx Lurker

    Joined:
    Apr 10, 2007
    Posts:
    2
    winlogon.exe is a windows system process
     
  10. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    For instance, Wigon patches the system file winlogon.exe and some other trojans inject their dlls into it. I'd suggest Greenfly to email support[at]eset.com and enclose a link to this thread.
     
  11. greenfly

    greenfly Registered Member

    Joined:
    Dec 18, 2006
    Posts:
    43
    Get :

    Thanks Man ,, the guys are great ...:D they solving my problem "in progres"
     
  12. Get

    Get Guest

    You're welcome. Good luck :).
     
Thread Status:
Not open for further replies.