Re: Unknown virus in system32 dir after updating
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Sun, 16 Jul 2006 09:41:16 -0400
From: "Dynamo" <Dynamo_member@xxxxxxxxxxx>
| Hi,
| Not sure if this is the right group but here goes. Recently purchased a new
| notebook PC. After installing the latest windows updates my Mcafee anti virus
| software found a potentially unwanted program of fngmhlib.dll in the
| windows/system32 directory. It listed it as a generic a type pup. What is this
| file? Do I need it? How do I delete it?
| The sequence of events was as follows:
| I first downloaded the latest version of my antivirus software from Mcafee. Then
| I downloaded the latest microsoft windows xp updates. Before downloading the
| updates the microsoft site recommended that I download microsoft installer which
| I did. After downloading I rebooted the comp as suggested. When the computer
| rebooted I got an error message saying "Could not find fngmhlib.dll". The reason
| the system could not find it was because Mcafee was blocking it as a potentially
| unwanted program. What should I do?
| TIA
| Dynamo
It absolutely is NOT the correct News Group ! It is most likely a cooincidence of McAfee
flagging the file. Anti malware is Off Topic here but is "On Topic" in the following...
alt.privacy.spyware
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus
If there is an "unknown" then it should be checked out...
Please submit a sample of "fngmhlib.dll" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.
You can also submit a suspect, one at a time, via the following email URL...
mailto:scan@xxxxxxxxxxxxxx?subject=SCAN
When you get the report, please post back the exact results.
If it apperas to be a False Positive declaration then it should be submitted to McAfee as
such through and email. The following mail URL can be used...
mailto:virus_research@xxxxxxx?subject=False%20Positive
the file should be placed intio a password protected ZIP file with the password being;
infected
{ password = infected }
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
.
- References:
- Unknown virus in system32 dir after updating
- From: Dynamo
- Unknown virus in system32 dir after updating
- Prev by Date: Re: To Anyone At Microsoft Who Gives a Damn.
- Next by Date: Re: Please Help!
- Previous by thread: Re: Unknown virus in system32 dir after updating
- Next by thread: Re: To Anyone At Microsoft Who Gives a Damn.
- Index(es):
Relevant Pages
|
