Malwarebytes-NginuL_na.exe worm

  collinsc 11:50 03 Oct 2010
Locked

Hi
Im doing a malware search on a laptop, it finds the following: NginuL_na.exe worm, but is unable to remove it, but instead adds to the "delete on reboot list" - but when i search again it is still there.

path is users\public\favourites

any ideas?

thanks

  john bunyan 11:56 03 Oct 2010

May be worth a look:

click here

Found this interesting, not as easy as it seems to get rid of!

click here

  collinsc 11:57 03 Oct 2010

ta

  birdface 12:01 03 Oct 2010

It was classed as a false positive with Malwarebytes last year so maybe the same again.

click here

  lotvic 12:03 03 Oct 2010

could be false positive click here

  collinsc 12:06 03 Oct 2010

thanks guys, surprised its not fixed yet though... that post on the thread was in 2009

  Fruit Bat /\0/\ 12:17 03 Oct 2010

Switch off system restore
scan and remove
shutdown
restart the machine
rescan

it should now be gone

  lotvic 13:18 03 Oct 2010

Don't trust your link, the server is in Shanghai, China
WOT wouldn't let me access site, Gave warning of 'Poor Site Reputation'

  birdface 09:27 06 Oct 2010

Yes it was definitely one to stay clear off.
I was thinking it was spam.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

WPA2 hack: How secure is your Wi-Fi?

HP’s new Surface Pro rival is designed specifically for Adobe-using designers and artists

Best kids apps for iPhone & iPad

Que faire si son iPhone ou iPad est tombé dans de l'eau ?