| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 70224 | 2006-06-26 06:40:00 | Browser running on startup | bunta (10620) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 466188 | 2006-06-27 20:29:00 | Well, I have fixed the problem. My Anti-virus program just updated itself and detected a backdoor trojan in the file C:\windows\system32\nvcpl32.exe which is a driver file from nVidia. It ran a disinfect (deleting the file) and after a reboot - no firefox started up. So somehow my nVidia driver got infected with some trojan and that was trying to access the net..... random. |
bunta (10620) | ||
| 466189 | 2006-06-27 22:30:00 | So if you didn't value the need to have a third-party firewall you do now. :thumbs: Interesting how a driver file from nVidia had a trojan in it. Where did you get the file from? |
FoxyMX (5) | ||
| 466190 | 2006-06-28 01:14:00 | I would assume that the file itself did not originally contain the virus but at some stage it either got infected or replaced by the trojan. I ran a scan on the installation files from nvidia and none of the original files contained the trojan. |
bunta (10620) | ||
| 466191 | 2006-06-28 01:44:00 | It will help if you run HJT and remove this entry and delete the (red) file.Its a Trojan O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll C:\WINDOWS\system32\klogon.dll |
Pancake (6359) | ||
| 466192 | 2006-06-28 05:27:00 | klogon.dll is a part of Kaspersky Internet Security 2006. So should be fine to have loaded. |
bunta (10620) | ||
| 466193 | 2006-06-28 05:50:00 | Yes you are 100% right.That file is fine.God knows why I jumped on that one... | Pancake (6359) | ||
| 1 2 | |||||