Nurech

[Bananaman]

I'm thinking it might be a false positive, since scans by both Ad-Aware and Kaspersky come back clean. But since I don't have Runasadmin Shim installed, I'm not completely sure.


Nurech: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-1715567821-1220945662-839522115-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache\*\upnp.exe


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2006-10-03 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-01-15 advcheck.dll (1.2.1.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-02-28 Includes\Cookies.sbi (*)
2006-12-08 Includes\Dialer.sbi (*)
2007-02-28 Includes\DialerC.sbi (*)
2007-02-07 Includes\Hijackers.sbi (*)
2007-02-28 Includes\HijackersC.sbi (*)
2006-10-27 Includes\Keyloggers.sbi (*)
2007-02-28 Includes\KeyloggersC.sbi (*)
2007-02-14 Includes\Malware.sbi (*)
2007-02-28 Includes\MalwareC.sbi (*)
2007-01-19 Includes\PUPS.sbi (*)
2007-02-28 Includes\PUPSC.sbi (*)
2007-02-28 Includes\Revision.sbi (*)
2006-12-08 Includes\Security.sbi (*)
2007-02-28 Includes\SecurityC.sbi (*)
2007-02-02 Includes\Spybots.sbi (*)
2007-02-28 Includes\SpybotsC.sbi (*)
2005-02-17 Includes\Tracks.uti
2007-02-14 Includes\Trojans.sbi (*)
2007-02-28 Includes\TrojansC.sbi (*)


The instructions on the side panel say that in order to remove it completely, you should boot into safe mode and run another scan. Yet no matter what I do, it keeps coming back. I've tried to fix this a few different ways:

1) I scanned in normal mode, fixed the problem, then booted into safe mode as instructed. For some reason, Spybot did not detect Nurech at all in safe mode, meaning I couldnt fix it. Once I boot back into normal mode I ran another scan, and Nurech was back.

2) I've tried scanning in normal mode but NOT fixing the problem, then booting into safe mode and scanning again. This time it found Nurech, and I was able to fix it. However, when I boot back into normal mode and ran another scan, Nurech was back.

3) I've tried scanning and fixing in normal mode, ignoring safe mode. After a reboot, Nurech is back again.

Any help would be appreciated. Thanks in advance.

[pskelley]

Welcome to the forum, you said this:
I'm thinking it might be a false positive, since scans by both Ad-Aware and Kaspersky come back clean.You have posted in a Malware Forum, if you need help with Spybot issues, post here:
http://forums.spybot.info/forumdisplay.php?f=4

If you do post in this forum, please follow the instructions:
"BEFORE you POST" Mandatory Steps Before Requesting Assistance
http://forums.spybot.info/showthread.php?t=288

Thanks

[tashi]

Please excuse me for sliding in. :D:

Bananaman.
http://forums.spybot.info/showthread.php?t=11940

[tashi]

This topic has been archived.

If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.