Previously this has also occured causing me to reformat my hard drive. Now, however, it is being blocked constantly. I cannot delete it however. It also doesn’t show up when I search it. How do I fix it?
In Comodo it is written:
Action: Terminate Process
It repeats every 2 secs.
I viewed active processes and chose terminate and quarantine. Will this solve my problem?
I know this came from my USB Flash Drive, but I’m wondering how it managed to survive a lot of cleaning with ESET Nod32 and was detected only later by Comodo.
It is a tool called unlocker. What you do is install this, then right click on the file you want to delete hit ‘unlocker’ under no action hit ‘delete’ then select one of the processes and hit ‘unlock all’
Very very odd. It seems that they are infact rootkits. I suggest you scan with the following: (make sure you enable antirootkit in the scanning)
*NOD32 with advanced heuristics and make sure antirootkit is on
NOTES: Do not have more then one antivirus installed at a time
If you already have an antivirus installed currently boot into safe mode then scan
If you feel the executable is at bay (COMODO keeping it from running) then don’t do anything
The IT in a certain company told me that version 2.6 of Nod32 can detect this, I currently have 3.0.642 installed. Although the virus is at bay thanks to Comodo, I don’t want to keep blocking it and be wary every time I attach a
flash drive. Before I do any changes to my antivirus, I would like to know which one is the best option.
Ok, when you run the installer, make sure yout hit ‘custom’ installation, then it will eventually come to a screen where you can choose what modules you want installed. Uncheck everything except Avast!
Then after you install avast and restart. Run that installer previously mentioned in this thread, that will give it the antirootkit capability.
Uncheck all of the Resident protection. Instant messaging, Web Shield, P2P Shield, Internet Mail, Outlook/exchange, Web Shield and Standard Shield. We just want Avast to be a on demand scanner. Installing them would give it real time protection which is not needed since you have Nod32. Hope this helps some.