Win32/Agent.NEF

Discussion in 'ESET Smart Security' started by hopetobe, Feb 18, 2011.

Thread Status:
Not open for further replies.
  1. hopetobe

    hopetobe Registered Member

    Joined:
    Sep 19, 2010
    Posts:
    34
    I fully scanned my computer and found nothing. But whenever i insert my clean usb flash disk, nod32 constanly warns me of Win32\Agent.NEF.

    It seems that nod32 is deleting the newly generated virus repeteatedly.

    And I can not find something unusual in the ESI log.

    Could any one help? The basic information of that virus is not available in eset threat encyclopedia so its hard to remove it mannually.

    Why ESET can not detect an already known virus in an infected computer?
     
  2. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    Hi hopetobe,

    Please provide us with the contents of your Detected Threats Log.

    - open ESS/EAV main window
    - click Tools > Log files > Detected Threats
    - copy the lines containing the threat warning and paste this information into your reply

    Also, did you run an in-depth scan of your usb flash disk only?

    Let us know.
     
  3. hopetobe

    hopetobe Registered Member

    Joined:
    Sep 19, 2010
    Posts:
    34
    I formated my usb flash disk by another clean computer twice and checked carefully by my colleague with ESET NOD32. I stopped the system restore and deleted temp files on that infected PC just now. Unfortunately, it's keep restarting.............................. Gosh!

    But i guess i caught the sample.

    It is a winrar file and i just changed its extension to upload. Please help.
    But it seems i have to rebuilt my OS.
     
    Last edited by a moderator: Feb 18, 2011
  4. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    Please do not submit samples here. Submission must be sent using the following procedure:

    How to submit virus or potential false positive samples to ESET's labs

    Anyway, the file is currently being detected as a variant of Win32/Agent.NEF

    Make sure you have the latest updates from ESET, then run another in-depth scan of your system and removable drives.

    Let us know what you find.
     
  5. SunRui

    SunRui Registered Member

    Joined:
    Aug 21, 2009
    Posts:
    42
    I have the same trouble with hopetobe, is there any solution on this sample?
     
    Last edited: Feb 23, 2011
  6. yongsua

    yongsua Registered Member

    Joined:
    Feb 9, 2011
    Posts:
    474
    Location:
    Malaysia
    If you sure the file is clean,then you can safely perform exclusion.
     
  7. SunRui

    SunRui Registered Member

    Joined:
    Aug 21, 2009
    Posts:
    42
    Hi tony attachment is what you need, pls check it, in fact the real trouble is some virus file constantly created in the removeable disk, ESS constantly pop alert info, it is so annoying. pls change the extension txt into rar, then unpack it~
     

    Attached Files:

  8. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    Hi SunRui,

    Please run a complete on-demand scan of your local drives (fixed and removable).

    1. Open the main program window by clicking the ESET icon next to the system clock or by clicking Start All Programs ESET ESET Smart Security or ESET NOD32 Antivirus.

    2. Click Computer scan > Custom scan

    3. Select In-depth scan for the Scan profile.

    4. For Scan targets, select "Local drives" and manually tick the box for Operating memory and drive J:

    5. Click Scan at the bottom and wait until the scan ends.

    Once finished, the last lines of the on-demand scan log will contain information about what was detected, cleaned, etc. Please let us know what you get.

    Thank you.
     
Thread Status:
Not open for further replies.