Starter.nai (eset name) from thread 49945

[FrankTiger]

Hi everyone

Googleing around I arrived to thread 49945 posted by kyuubi654 on july. It seems that we have the same malware "starter.nai" as detected by eset antivirus.

It is located in "...\macromedia\common" folder with 2 files xxxxx.dll and xxxxx.exe The exe file is identified by the nod32 antivirus since oct 14 as "starter.nai"

Looking into the registry, the key is located in the run booting section as "WAB=xxxx.exe" I cleared the key but reappeared in minutes

The best way so far to get rid of this problem is to delete the malware files in the "macromedia\common" folder and replace with null files with the same names.

Any help?

Frank

[tashi]

Hello FrankTiger,



Googleing around I arrived to thread 49945 posted by kyuubi654 on july. It seems that we have the same malware "starter.nai" as detected by eset antivirus.

http://forums.spybot.info/showthread.php?t=49945

The topic was archived after resolution in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)

If you would like to start a topic in that forum regarding malware removal please see this FAQ: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Best regards.

[FrankTiger]

Hi Tashi

If you read carefully the original thread, it seems that kyuubi654 did not solve his problem cleaning the malware. He went to check the hardware, reinstalled drivers and may be windows. Then he muted and Shaba ten days later closed the thread.

That's the reason I posted this issue. The solution could be useful to some more people.

Frank

[tashi]

Hi Tashi

If you read carefully the original thread, it seems that kyuubi654 did not solve his problem cleaning the malware. He went to check the hardware, reinstalled drivers and may be windows. Then he muted and Shaba ten days later closed the thread.

That's the reason I posted this issue. The solution could be useful to some more people.

Frank

Yes the user posted in the malware forum to check for infection, when that side of it was resolved the analyst marked it as such and linked him to another forum for the other issues.


Well i have to start looking for the cause of that freezing problem now. I've checked almost everything and nothing seems to be wrong, but windows still freezes all the time.

But thank you very much for all your help in helping me remove all those virus threats.
That looks like hardware issue to me.

Is it OK to redirect you to some windows forum for that issue? As you said,

Any help? I read incorrectly that you were requesting it. ;)

Snippet from forum FAQ: http://forums.spybot.info/showpost.php?p=16905&postcount=2

This of course does not affect those of you who wish to post advice to other members in the Spybot-S&D forum regarding Spybot issues; only malware removal and procedures.

Best regards.