Re: updates fail to install, no errorcode given



But, IS it a trojan and NOT a false positive ?
STRONGLY suggest you scan tcpip.sys here to determine what the situation is:
http://www.kaspersky.com/scanforvirus

If Norman quarantines or deletes the file than Windows will keep informing you that the files is *required* and that you should 'repair'.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


RRC wrote:

I get this message from Norman "Location: c:\windows\system32\drivers\tcpip.sys
Trojan: W32/Hupigon.AIVC"

It is the same trojan every time and then windows asks to repair windows again by installing it.

Just before I installed all the updates I did a spyware scan and removed all bugs. Then I installed all the updates and reboot my pc. And then the trojan attacks.

.



Relevant Pages

  • Trojan modifying ntdll.dll and cmd.exe
    ... We have encountered a trojan that has modified both cmd.exe and ... as modified and Windows also flagged it). ... locked-down) and believe the application installing it was either a ... implement and enforce WLAN security policies to lockdown enterprise WLANs. ...
    (Incidents)
  • Re: Linux and security
    ... as a trojan backdoor. ... > potential from virus' it does severely limit the ability a virus has to ... if you catch a virus by installing software then you gotta sift through ... > opposed to a large portion of the global open source community. ...
    (comp.os.linux.security)
  • Re: Possible Virus or Trojan?
    ... > Trojan virus came from Windows Update. ... I have tried installing the UPnP ...
    (microsoft.public.windowsxp.general)
  • RE: Possible Virus or Trojan?
    ... It states that the Trojan ... virus came from Windows Update. ... I have tried installing the UPnP Client and then ...
    (microsoft.public.windowsxp.general)
  • RE: Possible Virus or Trojan?
    ... It states that the Trojan ... virus came from Windows Update. ... I have tried installing the UPnP Client and then ...
    (microsoft.public.windowsxp.perform_maintain)