Win32: Trojan-gen has infected /system32/drivers/ip6fw.sys

Win32: Trojan-gen has infected /system32/drivers/ip6fw.sys
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Win32: Trojan-gen has infected /system32/drivers/ip6fw.sys =?Utf-8?B?a292c3Rlcg==?= 06-29-2007
Posted by =?Utf-8?B?a292c3Rlcg==?= on June 29, 2007, 12:20 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

Avast, my anti virus program, detected the Win32: Trojan-gen in my
ip6fw.sys file, which I believe is a driver for Windows Firewall.

Currently, the infected file is in the virus chest - I don't know what to
do. If I delete the file, won't it mess up Windows Firewall?

All help very much appreciated,

Thanks very much!

Posted by Malke on June 29, 2007, 9:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options
kovster wrote:
> Hi,
>
> Avast, my anti virus program, detected the Win32: Trojan-gen in my
> ip6fw.sys file, which I believe is a driver for Windows Firewall.
>
> Currently, the infected file is in the virus chest - I don't know what to
> do. If I delete the file, won't it mess up Windows Firewall?
>
> All help very much appreciated,
>
> Thanks very much!

That file is the trojan and has nothing to do with the Windows Firewall.
You need to get rid of it.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by David H. Lipman on June 29, 2007, 4:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


|
| That file is the trojan and has nothing to do with the Windows Firewall.
| You need to get rid of it.
|
| Malke

I second that. It is using that name to obfuscate it malicious activity.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?UGFuZGFfbWFu?= on June 29, 2007, 3:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
"kovster" wrote:

> Currently, the infected file is in the virus chest - I don't know what to
> do. If I delete the file, won't it mess up Windows Firewall?
>

The file is already deleted . Being in the quarantine means that Avast has
deleted the file from its original location and has placed a copy into a
specific folder so that you can deal with the files further (if necessary) ,
e.g. you want to restore it becuase you suspect false alarm or Avast support
person needs the file for further investigation.This file must be a trojan.

--
Panda_man
Silver level Contributor

Similar ThreadsPosted
Help I have been Infected October 1, 2006, 9:26 pm
HotPOP.com infected July 1, 2005, 4:33 pm
spyware infected July 24, 2005, 9:23 pm
Web Server infected? September 16, 2005, 2:58 pm
wininet.dll is infected October 1, 2005, 12:17 am
Can't handle infected PC. Please Help! April 15, 2006, 6:17 am
RE: Can't handle infected PC. Please Help! April 15, 2006, 1:10 pm
"Your computer is infected" July 1, 2006, 10:59 am
!!Infected with cool.exe Help!! August 9, 2006, 10:01 pm
!!Infected with cool.exe Help!! August 9, 2006, 10:03 pm

The site map in XML format XML site map

Contact Us | Privacy Policy