Welcome, Guest. Please login or register.
March 22, 2010, 02:34:43 AM

Login with username, password and session length

373609 Posts
41460 Topics
94210 Members

Latest Member: ehsanotaku

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Virus/Malware Removal Assistance
| | |-+  weird warning
« previous next »
Pages: [1] Go Down Print
Author Topic: weird warning  (Read 1099 times)
Nofsdad
Newbie
*
Offline Offline

Posts: 9


« on: May 21, 2009, 12:52:41 PM »

Lately, every time I boot my computer I get a message from Comodo that it has discovered unclassified malware... c:\windows\system32\gaopdxvxtqtsniqpowognlbsvtcvixdlwqdixr.dll

I always remove it  but since it's always back again at a reboot, I was wondering if the file actually existed or this was a false positive and if it is not a false positive, where it's coming from and what program keeps installing it.

 
Logged
HeffeD
Comodo's Hero
*****
Offline Offline

Posts: 1693


« Reply #1 on: May 21, 2009, 01:12:07 PM »

I don't think that's a false positive because CIS isn't going to be making up .dll names. That's obviously not a valid .dll name, so I suspect you have an infection.
Logged

Nofsdad
Newbie
*
Offline Offline

Posts: 9


« Reply #2 on: May 21, 2009, 02:46:56 PM »

OK, thanks.  I'm running full scans bi-nightly and removing everything that turns up.  Anything else I can do to get rid of the thing?
Logged
burebista
Comodo Loves me
****
Offline Offline

Posts: 199



« Reply #3 on: May 21, 2009, 02:51:13 PM »

Run a MBAM and/or SAS scan just to be sure.
Logged

If it ain't broke... fix it until it is.
HeffeD
Comodo's Hero
*****
Offline Offline

Posts: 1693


« Reply #4 on: May 21, 2009, 03:01:14 PM »

What to do if you're infected - eXPerience Rev.2

This is a great reference.
Logged

Nofsdad
Newbie
*
Offline Offline

Posts: 9


« Reply #5 on: May 21, 2009, 03:43:27 PM »

OK, thanks folks.  I'll give it a shot.
Logged
Nofsdad
Newbie
*
Offline Offline

Posts: 9


« Reply #6 on: May 21, 2009, 04:04:22 PM »

Would you believe?  I was trying to download the SAS Installer from their site http://www.superantispyware.com and CIS insisted it was a virus and wouldn't allow me to download it.  I tried ignoring it once but it just kept popping up again.  Finally had to add it to my trusted list to even finish the download 

I'm going to assume that was a false positive. Grin
Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5848



« Reply #7 on: May 21, 2009, 04:10:12 PM »

That is most likely a False Positive. Please consider submitting it using How to report False Positives/Suspicious Files & How to Submit them

Keep us posted about the results of the scans.
Logged

Please read: Introduction to the Sandbox

Using CIS v4 and always the latest snapshot of Opera browser.

AMD Phenom 925 quad core with 4 GB RAM on MSI 785G E53
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.53 seconds with 18 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com