Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Crimzin
Amarr
|
Posted - 2011.04.17 11:27:00 -
[1]
Avg decided Cuda.dll and cudart.dll were viruses and put them in virus vault, destroyed 2 clients as the crc check failed, uninstalled avg and downloaded a new client, installed and copy to get 2 clients again. Went for avast free virus, works good, better than avg but I get off for downtime just now and its done the same thing...
Another 2 clients fkd, I had deleted the downloaded client....
Viruses description : Win32:Ramnit-G
Anyway to get those 2 files? I can add exclusion Safe Space Not So Safe |
Othran
Brutor Tribe
|
Posted - 2011.04.17 12:07:00 -
[2]
Originally by: Crimzin
Avg decided Cuda.dll and cudart.dll were viruses and put them in virus vault, destroyed 2 clients as the crc check failed, uninstalled avg and downloaded a new client, installed and copy to get 2 clients again. Went for avast free virus, works good, better than avg but I get off for downtime just now and its done the same thing...
Another 2 clients fkd, I had deleted the downloaded client....
Viruses description : Win32:Ramnit-G
Anyway to get those 2 files? I can add exclusion
No real help but...
AVG has been an ongoing road crash for years now. I don't know anyone who still uses it, they've had so many disasters and false alarms. As recently as Dec 2010 they managed to brick thousands of Win7 machines after a Windows Update.
Avast isn't any better. Flagging up the majority of websites worldwide as infected (12 April 2011) shows the competence there.
Anyone who actually KNOWS the history of these cowboys and STILL uses them is deranged, quite quite deranged.
|
Burnharder
|
Posted - 2011.04.17 12:32:00 -
[3]
Use Microsoft Security Essentials. It's free for personal use, uses minimal system resources, isn't in your face, doesn't screw your Eve client over and is in my opinion the best anti-virus out there. Make sure you uninstall your current crap anti-virus before you install this one, of course.
|
Gangster101 PureLove
|
Posted - 2011.04.17 16:44:00 -
[4]
Edited by: Gangster101 PureLove on 17/04/2011 16:44:26
Originally by: Burnharder Use Microsoft Security Essentials. It's free for personal use, uses minimal system resources, isn't in your face, doesn't screw your Eve client over and is in my opinion the best anti-virus out there. Make sure you uninstall your current crap anti-virus before you install this one, of course.
Yes, MSE works wonders and its extremely light weight. I would also recommend going to google and downloading their "PC Tools Spyware Doctor" which is another free tool that is very helpful.
|
Crimzin
Amarr
|
Posted - 2011.04.18 01:19:00 -
[5]
Thanks for the ideas guys and info I don't like avg and have never heard of avast till last night (Google search next under avg) would love if someone could nudge me in the right direction? please
A Microsoft product working wonders? IL look into it..
Another 2 clients down, this is getting bad.
Question could I have an actual nasty virus that's flagging these as infected? why just me? why both programs?, and yes it is both virus programs that do the damage, not a simmiler looking one, or some crap virus that gets destroyed after it makes its first move.
This is some nasty ****, also noticed my browser was set on proxy, which I did not do and fixed, but it pops back now and again. Until I destroy the process iexplorer even tho im using firefox.
FYI Currently Im having to instal eve every time I turn my computer on, it seems to be while I play those 2 files get infected. Windows xp, striped down of all useless process's which also helps spot a virus pretty quick, im normaly pretty good at getting rid of them without to much hassle. But this has me Safe Space Not So Safe |
Vmir Gallahasen
Gallente United Mining And Distribution
|
Posted - 2011.04.18 04:37:00 -
[6]
Just throwing this out there, but is there a chance they're not false positives? What if you have a virus infecting DLLs?
You might take two supposedly infected DLLs and upload them to VirusTotal to get them scanned by a multitude of antivirus programs.
|
Crimcald
|
Posted - 2011.04.19 01:38:00 -
[7]
Originally by: Vmir Gallahasen Just throwing this out there, but is there a chance they're not false positives? What if you have a virus infecting DLLs?
You might take two supposedly infected DLLs and upload them to VirusTotal to get them scanned by a multitude of antivirus programs.
Ok thanks Im going to check this out I was able to get both files from a fresh install of eve and put them in a zip file, so now I just copy and paste the files to get both clients working. But yea noticed that the infected files are a bit bigger than the originals, by .2 mb, no idea if their supposed to get bigger.
|
Crimzin
Amarr
|
Posted - 2011.04.19 01:44:00 -
[8]
Daaammmmm
File name: cudart.dll Submission date: 2011-04-19 01:33:52 (UTC) Current status: finished Result: 36/ 42 (85.7%)
Antivirus Version Last Update Result AhnLab-V32011.04.19.002011.04.18Win32/Ramnit.N AntiVir7.11.6.174 2011.04.19 W32/Ramnit.C Antiy-AVL2.0.3.72011.04.18 - Avast4.8.1351.02011.04.18 Win32:Ramnit-G Avast55.0.677.02011.04.18 Win32:Ramnit-G AVG10.0.0.11902011.04.18 Win32/Zbot.G BitDefender7.22011.04.19 Win32.Ramnit.N CAT-QuickHeal11.002011.04.18 W32.Ramnit.A ClamAV0.97.0.02011.04.19 W32.Ramnit-3 Commtouch5.3.2.62011.04.19 W32/Ramnit.E Comodo83902011.04.18 Virus.Win32.Ramnit.H DrWeb5.0.2.033002011.04.19 - Emsisoft5.1.0.52011.04.19 Virus.Win32.Ramnit!IK eSafe7.0.17.02011.04.18 - eTrust-Vet36.1.82782011.04.18Win32/Ramnit.C F-Prot4.6.2.1172011.04.19 W32/Ramnit.E F-Secure9.0.16440.02011.04.19Win32.Ramnit.N Fortinet4.2.257.02011.04.18W32/Ramnit.C GData222011.04.19 Win32.Ramnit.N IkarusT3.1.1.103.02011.04.19 Virus.Win32.Ramnit Jiangmin13.0.9002011.04.18Backdoor/IRCNite.wi K7AntiVirus9.96.44122011.04.18Virus Kaspersky7.0.0.1252011.04.19Virus.Win32.Nimnul.a McAfee5.400.0.11582011.04.19 W32/Ramnit.a McAfee-GW-Edition2010.1D2011.04.18Heuristic.LooksLike.Win32.SuspiciousPE.J!85 Microsoft1.68022011.04.19 Virus:Win32/Ramnit.gen!B NOD3260532011.04.19 Win32/Ramnit.H Norman6.07.072011.04.18 W32/Ramnit.I Panda10.0.3.52011.04.18 W32/Nimnul.A PCTools7.0.3.52011.04.18 Malware.Ramnit Prevx3.02011.04.19- Rising23.54.00.062011.04.18 Win32.Ramnit.b Sophos4.64.02011.04.19 W32/Ramnit-A SUPERAntiSpyware4.40.0.10062011.04.16- Symantec20101.3.2.892011.04.19W32.Ramnit.B!inf TheHacker6.7.0.1.1762011.04.18- TrendMicro9.200.0.10122011.04.18PE_RAMNIT.DEN TrendMicro-HouseCall9.200.0.10122011.04.19PE_RAMNIT.DEN VBA323.12.16.02011.04.18 Virus.Win32.Nimnul.b VIPRE90552011.04.19 Virus.Win32.Ramnit.b (v) ViRobot2011.4.18.44162011.04.18 Win32.Nimnul.A VirusBuster13.6.311.02011.04.18Win32.Ramnit.Gen.2
Additional information MD5 : 387a96e2d3399a583b710ce6536bfd2d SHA1 : ffcf1a3d0bd108febdce3b19033c7c217b2c3523 SHA256: b2f9cf1b6a12adda2d9078c0d7163998de9783048b0e46abfa0b99ed52ee0ed9
Safe Space Not So Safe |
Crimzin
Amarr
|
Posted - 2011.04.19 16:21:00 -
[9]
Hmm maybe I asked wrong or something,
I can tell now that something is infecting the .dll's of a couple of programs I have, Including Eve and basically anything I try to use, its just I was using eve only at the time now even windows media player is a virus, lol
So what am I supposed to do, should I be worried about my account being compromised? I mean it is doing something to eve and I thought a virus was to steal info? among other things of course.
Im asking for serious advice here, eve is packed with knowledgeable people.
Or am I posting in the wrong place? I have give as much info as possible If you looked at the thread and didnt replay because somethings missing so you couldnt tell, let me know what more info you need. Please. Safe Space Not So Safe |
Deviana Sevidon
Gallente Panta-Rhei Butterfly Effect Alliance
|
Posted - 2011.04.19 19:05:00 -
[10]
To make a test I submitted the cuda.dll and cudart.dll from my eve folder to virus total and with both files the result was 0% positive reports of anti virus programs.
It is indeed possible that something infected your system and is messing with dll. I would recommend to run Malwarebytes in safe mode, but if malware is found then you are better of with a clean reinstall of windows.
Quote: Disclaimer: All mentioned above contains my opinion and is therefore an absolute truth (for me anyway, my universe, muhahaha.....ok, done
|
|
Vmir Gallahasen
Gallente United Mining And Distribution
|
Posted - 2011.04.19 21:05:00 -
[11]
Originally by: Crimzin So what am I supposed to do, should I be worried about my account being compromised? I mean it is doing something to eve and I thought a virus was to steal info? among other things of course.
What you've got is pretty nasty and difficult to remove. Apparently it's a backdoor virus that lets a remote user take over your computer. Most sites seem to suggest reformatting your hard drive (as well as any removeable drives, it spreads through those as well)
|
Crimzin
Amarr
|
Posted - 2011.04.20 06:19:00 -
[12]
Ok guys thanks for your help looks like I have only one option
I guess thats what I get for bragging a day before that happened I have had my original install of xp for 5+ years and never had to reinstall or lose all my data at any point... until now :(
No virus programs are picking it up, I have scanned the whole pc now and alot of infected dll's are getting found, but in legit programs like eve and windows media player, everything except the actual virus thats causing all this.
Also I talked about closing the process iexplorer and the proxy went away, well now that has... manifested itself into a process called firefox, exactly like the real firfox process except it uses no cpu and very little memory, were the real firfox process can be using 100+ mb memory for just one tab open, there normaly is 5 firefox process running while only 1 is the real one, that's easily spotted but worring that the virus was able to... change itself Safe Space Not So Safe |
Deviana Sevidon
Gallente Panta-Rhei Butterfly Effect Alliance
|
Posted - 2011.04.20 12:08:00 -
[13]
Look at the bright side, this is a very good time to move on to Windows 7.
Quote: Disclaimer: All mentioned above contains my opinion and is therefore an absolute truth (for me anyway, my universe, muhahaha.....ok, done
|
Crimzin
Amarr
|
Posted - 2011.04.21 11:06:00 -
[14]
I actually have Win7 running of a different HD on my computer it has same issues with the virus it's running avg, but I run multiple clients and in WIN7 its not as efficient for that, I only have 2.5g ram.
It is shiny tho, but I have my cpu setup as MY pc on xp by killing certain process and startup programs 7 makes me feel like I rented MY pc, I think technically you are renting there OS, even tho you buy, but my PC I worked for and paid for so I use it for eye candy... when it works
Safe Space Not So Safe |
Demortes
Caldari Oracle Phoenix
|
Posted - 2011.04.29 03:21:00 -
[15]
I find this thread kinda hilarious. From insulting AVG and Avast to... "Oh... they were right."
As for helping, I've liked Avast, never had a problem. That doesn't mean following it blindly. It's merely a suggestion. Your knowledge of your computer will provide the best defense, watch for weird stuff happening like high RAM usage, especially network usage.
I'd still not trust anything made by the same people who make your OS. Too much bias possibilities. Redmond thought it would be wise to force IE as a mandatory install.... look where that got them.
Do have to say, kudos to the one that suggested the web based scan.
|
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |