Win32.RAdmin.22

Hello,i'm Duca Bianco from Italy

Good morning:i'm a new boy of this forum.
When i make a new virus scan on line with kaspersky he found 1 virus who my antivirus NOD32 not found: this is the kaspersky report.

Tank you for the your's attentions

C:\System Volume Information\_restore{0721ECB1-9A97-4073-A913-0E5F80688C2A}\RP226\A0203300.exe/radmin.exe Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.22 skipped

C:\System Volume Information\_restore{0721ECB1-9A97-4073-A913-0E5F80688C2A}\RP226\A0203300.exe/raddrv.dll Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.22 skipped

C:\System Volume Information\_restore{0721ECB1-9A97-4073-A913-0E5F80688C2A}\RP226\A0203300.exe/r_server.exe Infected: not-a-virus:RemoteAdmin.Win32.RAdmin.22 skipped

C:\System Volume Information\_restore{0721ECB1-9A97-4073-A913-0E5F80688C2A}\RP226\A0203300.exe Gentee: infected - 3 skipped

 

Unless you have PDA checked off in the scan settings this will most likely not be picked up by NOD32. Check your settings against those in Blackspear's guide and try the scan again. The guide is here:
https://www.wilderssecurity.com/showthread.php?t=37509

-Cov

 

Hi duca bianco, welcome to Wilders.

Could you please take the following steps:

1. Make sure you have Nod32 setup the same as HERE

2. Turn OFF System Restore (note: by doing so you will lose all restore points) and reboot your computer.

3. Run a scan by clicking on the NOD32 Control Centre> NOD32> Run NOD32> Scan and Clean.

Let us know how you go...

Cheers

 

By the way, "PDA" is "Potentially Dangerous Applications". I am not sure what the translation of it in italiano would be.

 

RAdmin is software for remote administration, commonly used by administrators. Detection of certain versions was removed intentionally in the past.