Author Topic: HELP VIRUS can't find any info on  (Read 3064 times)

0 Members and 1 Guest are viewing this topic.

cjlove

  • Guest
HELP VIRUS can't find any info on
« on: November 10, 2006, 05:40:32 PM »
My avast has detected a virus  cnmg32.dll win32:trojan-gen

computer is acting slow and every time i sign on to internet explorer, avast says that it detects it. I cannot find any information on this virus at all

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: HELP VIRUS can't find any info on
« Reply #1 on: November 10, 2006, 06:26:01 PM »
Hi cjlove,

Could be Haxdoor: try running the HaxFix tool:

http://forum.hijackthis.de/showthread.php?t=15448

Otherwise try the usual Trojan removers:

DrWeb CureIT!:

http://download.drweb.com/drweb+cureit/

a-Squared free:

http://www.emsisoft.com/en/software/free/

Ad-Aware:

http://www.download.com/3000-2144-10045910.html

Spybot Search & Destroy:

http://www.safer-networking.org/
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

NickGolovko

  • Guest
Re: HELP VIRUS can't find any info on
« Reply #2 on: November 13, 2006, 03:31:21 PM »
Even special anti-rootkit utilities cannot always deal with Haxdoor, and you recommend anti-spyware like Ad-Aware.  :)

cjlove, if you still experience problems, don't hesitate to address me. I have the needed tools to heal your machine.

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: HELP VIRUS can't find any info on
« Reply #3 on: November 13, 2006, 04:54:34 PM »
cnmg32.dll fits the behaviour of Haxdoor, which drops a dll which looks similar: ****32.dll (* being a random character) but it could be anything without a positive identification, which is why I recommended the usual scans. If it is Haxdoor, the first logical thing to try would be the Haxfix tool, seeing as how it's designed to remove Haxdoor.
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33905
  • malware fighter
Re: HELP VIRUS can't find any info on
« Reply #4 on: November 13, 2006, 10:25:55 PM »
Hi FwF.

Yep you find the 32 but also often the reversed like 23:
Let her also consider these removal instructions: http://www.hijackthis-forum.de/showthread.php?t=15448
Here are mentioned various variants of Haxdoor.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!