Jump to content

rbkaiser

Members
 View Profile  See their activity

  • Posts

    20

  • Joined

  • Last visited

 Content Type 

Posts posted by rbkaiser

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    hi sorry for late reply. Just finish duty shifts

    I exported and uninstalled ESET. Did full shutdown and reinstall + reactivate.

    ESET is working okay now BUT same issue, still does not autostart and the windows settings, automatically goes off when i close the window

    I actually tried turning it on, and leaving the window open the whole time. It was still on the whole time, but when i closed it later, still off again when i turn it on

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    - i unpinned ESET from the taskbar

    - opened the Apps startup settings and enabled it

    image.png.8cb22f28843b3cc2b0cc11e34dec5c34.png

    - closed it, when i reopened, set to off again?

    - I set it to on, closed, then restarted, when I turned on again, set to off again

    am I missing a save button in the apps startup? like after switching on, im suppose to press this to "save changes"? since it seems like its not saving the settings i made

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    17 hours ago, itman said:

    Let's manually add the Eset GUI icon to your desktop toolbar and see if that resolves the issue.

    Open the Win 10 start menu. Navigate down to the Eset folder and open it. Then left mouse click on the Eset GUI icon named Eset Security and manually add it to your desktop toolbar as shown in the below screen shot. Once the icon is added to the toolbar, you can position it anywhere you wish on the toolbar.

    Eset_GUI.thumb.png.0f50921d4f82676cbf773064e956cbcf.png

     

    i already have ESET pinned to my taskbar ever since i got it to work weeks ago

    i always clicked it to "open" it every time i started my PC, since it was not appearing in the taskbar

    image.png.8a061d50f7f1f7ae51ef1e1b669cbbb3.png

    you know how its like this at first but if you click it the GUI opens up and the icon will become like this (since an instance is opened)

    image.png.a8bfd75c3bbdcf76b4fa4489b6ed57b2.png

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    hey guys thank you for the help! sorry for the late reply.. i was busy for a week and only got to try this last wed

    been checking if there were any problems and so far since... its been good

    i still have a system restore point saved, and deleted the 2 tasks... no more pop ups since Wed, and everything been okay since.. thank you

     

    i noticed one thing however... when I turn on my PC, ESET does not seem to automatically start up? or it is there, but just hidden?

    image.png.ac8d2c87be131d675088cbefc5fdbb68.png

    there is no ESET icon here

    if i specifically open ESET it looks like this nowimage.png.399a011d02cd36b9599bab3b951b8a53.png

     

     

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    On 7/26/2020 at 9:12 PM, itman said:

    Looks like it is time to employ the "heavy gun" in regards to what is attempting to run these .dlls at system startup time.

    Download SysInternal's Autoruns from here: https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns . Unzip it. From the extracted folder created, right button mouse click on Autoruns.exe and run it as Administrator.

    Once it starts up and populates entries, mouse click on the Options tab and ensure it is configured as shown in the below screen shot:

    Autoruns_1.thumb.png.590ec48909bdd9953e9ba67dddc43539.png

    I believe Autoruns will repopulate after the above reconfiguration. If it does not, terminate it and restart it as done above.

    Copy each file name shown below:

    startupchecklibrary.dll

    winscomrssrv.dll

    one at a time into the "Filter" box shown at the top of the Autoruns screen display. After each file name entry, wait for Autoruns to complete its search. Delete the existing file name entry prior to entering the next one ensuring Autoruns has first repopulated all entries.

    If Autoruns finds a startup entry for the file name, post a screen shot of the entire Autoruns screen display where the entry was found. Terminate Autoruns execution for the time being.

    sorry late reply.. i was away for a while

    did i get the correct screenshots? 

    image.thumb.png.fb2b74657c545aea298e10dad0fadeab.png

    image.thumb.png.f48c2125a55a7163dd9df399615af417.png

     

     

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    8 hours ago, Marcos said:

    Looks like the machine should be already clean since only a PUA was detected during the scan. Are you still getting detections from the startup scanner?

    yes I got that notification also when i turned it on before the scan

    something is always looking for those 2 files and saying "error" because they are quarantined

    7 hours ago, SeriousHoax said:

    Off topic maybe, please consider ditching utorrent for something like qBittorrent. utorrent installer usually comes bundled with pup and has other risks also and as you can see it's detected by ESET too. 

    il try that software. I've been using this every since, it was fine. it only started that this recently (since last sunday)

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    ah here's the backstory. Had this PC since 2016, and got ESET since. its always been installed and once in a while, makes a notif on warnings. the scan was pretty much automatic and in the background so not much notifs on that. so yeh, it was there and did its job

    just recently this pandemic/lockdown, i wanted to make a specific scan and noticed the "scan with ESET NOD32" option was not in the rightclick menu anymore. That's when I noticed that ESET seemed uninstall (or partially) and that's why i was asked to try to uninstall-reinstall to fix the problem (before the start of this topic).

    i do not know exactly when the previous one was gone. I didnt get to use the PC much prior to lockdown, just used a few mins a day and around 4days a week

    i am doing a full scan this morning as Marcos requested

    this is the startup directory. That's the only thing here. 

     

    image.png.be97962f8ccb0cab1b87826b0c25177e.png

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
    7/21/2020 11:40:16 AM;Startup scanner;file;c:\windows\system32\startupchecklibrary.dll;a variant of Win64/Agent.RL trojan;cleaned by deleting;;;B916C068F5FB448649214F55B667BE661E626114;12/14/2018 9:03:26 PM

    Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
    7/21/2020 11:40:15 AM;Startup scanner;file;c:\windows\system32\winscomrssrv.dll;Win64/Agent.NK trojan;cleaned by deleting;;;5E2B7048D92F193ED9E8A7CBECA00A9C294AFF39;2/25/2019 7:47:22 AM
     

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    (I'm not sure if I should start a new topic or just continue it here.. let me know if I should just make a new topic)

    so, ESET NOD32 has been working perfectly fine since, thanks guys

    but ever since, every time I shutdown and turn my PC back on I get two popup errors

    image.png.d281ed2687ae19e17d8fcdf46cff2985.png

    one is "StartUpCheckLibrary.dll" and the other is "winscomrssrv.dll"

    I checked NOD32 quarantine and saw that they were there

    image.png.bd5835ebb4fdebff89c25062994ec40d.png

    what is the solution here?

    is it a false positive since it seems to be a legit Windows file?
    or is it a real threat, and if so, how do I avoid the error pop up every time? (since seeing this means something's not working right)

     

    Installation Problems due to Malware Detected

    in ESET NOD32 Antivirus

    Posted

    Good morning guys I hope you can help me reinstall my NOD32

    been using it way back 2016, and I remember it was working well often, and there were the regular notifications and warnings it gives from time to time. I have gotten busy recently, and I never noticed these notifs disappearing. I finally noticed and checked that my NOD32 was not installed anymore, (when I was going to reactivate my expiring 1yr account.

    So I downloaded the installer, was able to register the license, and would be installing it again now.

    Thing is, I received and installation failed due to malware (Image 1). I followed the onscreen instructions for the Specialized cleaner, downloaded and ran it (image 2) and got a success notification (Image 3)

    But when I repeated the installation, I got the same error (Image 4) I repeated this 3 times

    NOD32 1.JPG

    NOD32 2.JPG

    NOD32 3.JPG

    NOD32 4.JPG

×
×
  • Create New...