Win32/PSW.OnlineGames.NMY trojan

Discussion in 'ESET Smart Security' started by viking1, Jan 22, 2009.

Thread Status:
Not open for further replies.
  1. viking1

    viking1 Registered Member

    Joined:
    Jan 22, 2009
    Posts:
    4
    Re: Just wanna tell ESET Something

    I have a threat detected on my PC and nod32 eset smart security show it like this

    object:
    C:\autorun.inf
    Threat:
    Win32/PSW.OnlineGames.NMY trojan
    Information:
    cleaned by deleting - quarantined

    and the trojan is yet still playing and annoying on my PC

    Note: This trojan stopped the update function in My nod32 eset smart security

    so please help what should I do o_O??!!!!!!!
     
    Last edited by a moderator: Jan 22, 2009
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Re: Just wanna tell ESET Something

    First of all, remove any removable devices (e.g. usb sticks, memory cards, etc.). Look into the file C:\autorun.inf and put down the file name listed at the line commencing with "shell\open\command=".
    Look up and rename that file and restart the computer.

    Send the file you've previously renamed in a password protected archive and this thread's url in the subject to samples[at]eset.com.
     
  3. viking1

    viking1 Registered Member

    Joined:
    Jan 22, 2009
    Posts:
    4
    Thanks a lot Mr Marcos but all I need an affective removal tool which delete win32 forever

    and then I want a solution to the update issue

    Thanks a lot
     
  4. SternMan

    SternMan Registered Member

    Joined:
    Aug 14, 2008
    Posts:
    31
    viking1 try to use this tool!

    ~Removed unknown exe program.~
     
    Last edited by a moderator: Jan 23, 2009
  5. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,725
    Location:
    Texas
    An ESET moderator has responded in this thread. No additional help is needed.

    In addition, do not post unknown executable files on the forums for any reason.
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Please do as I suggested so that we can assist you further in removing the threat.
     
  7. viking1

    viking1 Registered Member

    Joined:
    Jan 22, 2009
    Posts:
    4
    I tried to look into autorun.inf yesterday evening but i couldn't find it so is there another solution and please be advised that I enabled the showing hidden files
    I'm waiting for your reply
     
  8. viking1

    viking1 Registered Member

    Joined:
    Jan 22, 2009
    Posts:
    4
    what happened??!!! why you don't reply
    is that possible eset smart security doesn't have the solution o_O!!!!
    Pls advise me if is there any removal tool for win32/psw.onlinegames.nmy and its branches

    I'm waiting for your reply
     
  9. xMarkx

    xMarkx Registered Member

    Joined:
    Dec 1, 2008
    Posts:
    447
    Hello,

    Perhaps you could try disabling system restore, downloading and installing an antimalware application and then running it in safe mode.

    Everyone on these forums appears to recommended AntiMalwareBytes (www.malwarebytes.org). I myself have never used it, because I have never had to, but I've heard it's really good at removing things that EAV/ESS sometimes can't.

    Regards,

    Mark.
     
  10. PaulB2005

    PaulB2005 Registered Member

    Joined:
    Apr 19, 2005
    Posts:
    525
    Please don't do that. If you accidentally trash the system how can you go back? Better to restore to an infected system than not be able to go back at all.
     
Thread Status:
Not open for further replies.