Avast WEBforum

Other => Viruses and worms => Topic started by: cjlove on November 10, 2006, 05:40:32 PM

Title: HELP VIRUS can't find any info on
Post by: cjlove on November 10, 2006, 05:40:32 PM

My avast has detected a virus  cnmg32.dll win32:trojan-gen

computer is acting slow and every time i sign on to internet explorer, avast says that it detects it. I cannot find any information on this virus at all

Title: Re: HELP VIRUS can't find any info on
Post by: FreewheelinFrank on November 10, 2006, 06:26:01 PM

Hi cjlove,

Could be Haxdoor: try running the HaxFix tool:

http://forum.hijackthis.de/showthread.php?t=15448

Otherwise try the usual Trojan removers:

DrWeb CureIT!:

http://download.drweb.com/drweb+cureit/

a-Squared free:

http://www.emsisoft.com/en/software/free/

Ad-Aware:

http://www.download.com/3000-2144-10045910.html

Spybot Search & Destroy:

http://www.safer-networking.org/

Title: Re: HELP VIRUS can't find any info on
Post by: NickGolovko on November 13, 2006, 03:31:21 PM

Even special anti-rootkit utilities cannot always deal with Haxdoor, and you recommend anti-spyware like Ad-Aware.  :)

cjlove, if you still experience problems, don't hesitate to address me. I have the needed tools to heal your machine.

Title: Re: HELP VIRUS can't find any info on
Post by: FreewheelinFrank on November 13, 2006, 04:54:34 PM

cnmg32.dll fits the behaviour of Haxdoor, which drops a dll which looks similar: ****32.dll (* being a random character) but it could be anything without a positive identification, which is why I recommended the usual scans. If it is Haxdoor, the first logical thing to try would be the Haxfix tool, seeing as how it's designed to remove Haxdoor.

Title: Re: HELP VIRUS can't find any info on
Post by: polonus on November 13, 2006, 10:25:55 PM

Hi FwF.

Yep you find the 32 but also often the reversed like 23:
Let her also consider these removal instructions: http://www.hijackthis-forum.de/showthread.php?t=15448
Here are mentioned various variants of Haxdoor.

polonus