Win32.Dloader.azk - nod32

[Postman delivers]

Nod32 fould Win32.Dloader.azk (system32/nwaa.dll) file, any thing more
that I need to do?

 

[David H. Lipman]

From: "Postman delivers" <[email protected]>

| Nod32 fould Win32.Dloader.azk (system32/nwaa.dll) file, any thing more
| that I need to do?
|

You mean besides letting NOD32 remove it ?

If you are unsure that it is an actual Trojan, submit a sample to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.

 

[Postman delivers]

David H. Lipman expressed precisely :

You mean besides letting NOD32 remove it ?

If you are unsure that it is an actual Trojan, submit a sample to Virus Total
-- http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's
scanners. That will give you an idea what it is and who recognizes it. In
addition, unless told otherwise, Virus Total will provide the sample to all
participating vendors.

You can also submit a suspect, one at a time, via the following email URL...
mailto:[email protected]?subject=SCAN

When you get the report, please post back the exact results.

David,

This Trojan (AZK Trojan = nwaa.dll)

I let nod32 30-day trial version Deep analysis feature find it and then
remove it, as AVG would not locate it or remove it, nor could I
manually find the dll where AVG said it was located. I can only
presume it was a hidden file of some sort.

The only time it would show up, was while running webroot's Spysweeper!
It would flash in AVG, when I was running Spysweeper. Spysweeper
would not find it, but the AVG virus alert would appear indicating the
computer was infected, but it could not delete the Trojan.

I tried trend ,and Ewido on-line scan, they did not locate the file,
but downloading nod32 and performing a Deep analysis has been found and
deleted...

My question was could it still have a registry item that I need to
locate & remove?

JR the postman

 

[David H. Lipman]

From: "Postman delivers" <[email protected]>

| David H. Lipman expressed precisely :|
| David,
|
| This Trojan (AZK Trojan = nwaa.dll)
|
| I let nod32 30-day trial version Deep analysis feature find it and then
| remove it, as AVG would not locate it or remove it, nor could I
| manually find the dll where AVG said it was located. I can only
| presume it was a hidden file of some sort.
|
| The only time it would show up, was while running webroot's Spysweeper!
| It would flash in AVG, when I was running Spysweeper. Spysweeper
| would not find it, but the AVG virus alert would appear indicating the
| computer was infected, but it could not delete the Trojan.
|
| I tried trend ,and Ewido on-line scan, they did not locate the file,
| but downloading nod32 and performing a Deep analysis has been found and
| deleted...
|
| My question was could it still have a registry item that I need to
| locate & remove?
|
| JR the postman
|

Sure. Try searching the Registry. There are lots of places DLLs are loaded. Some can load
and hide from the GUI even if you search for Hidden and System files.