Results 1 to 10 of 20

Thread: Two Infections found-Win32.NrgBot.rtk.

Hybrid View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Senior Member alicez's Avatar
    Join Date
    Apr 2008
    Posts
    179

    Default Two Infections found-Win32.NrgBot.rtk.

    #3- Don't know what is going on!!!!
    I downloaded 11/23/2011 def updates and ran a scan on my Win 7 (64-Bit) computer and the scan came up with these two infections. Does anyone know what they might refer to? The state that they are Gateway Games, etc. (This is a Gateway computer).
    Could they be false/positives? What should I do with them?
    I didn't do anything with them, I just closed the S&D program.

    Win32.NrgBot.rtk
    SBI $9DB9AE9D Execitab;e
    C"\Program Files (86X) Gateway Games\Gateway Game Console\GameConsole-wt.exe

    Win32.NrgBot.rtk
    SBI $9DB9AE9D Execitab;e
    C"\Program Files (86X) Gateway Games\Gateway Game Console\GameConsole.exe


    http://imageshack.us/phot...images/405/spybotsd.jpg/
    Vista also Win7 (64-Bit) IE 9; MSE; SpywareBlaster; MalwareBytes; SpyBot

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello alicez,

    The link you provided gives a '404 Not Found'

    How to report Possible False Positives
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Senior Member alicez's Avatar
    Join Date
    Apr 2008
    Posts
    179

    Default

    I am new at all of this and so not too familiar with what is going on.
    I tried to Edit my thread, but was unable to do so.
    You explanation is very confusing to me. Where do I send the "screen-shot"



    http://imageshack.us/photo/my-images/560/spybotsd.jpg/

    The box in the middle reads:
    Fileinfection detected removing these may damaga your computer. If possible restart to a clean restore point or system backup.

    ((I really don't want to do a System Restore if I don't have to!)

    23.11.2011 12:50:57 - ##### check started #####
    23.11.2011 12:50:57 - ### Version: 1.6.2
    23.11.2011 12:50:57 - ### Date: 11/23/2011 12:50:57 PM
    23.11.2011 12:51:01 - ##### checking bots #####
    23.11.2011 13:00:20 - found: Win32.NrgBot.rtk Executable
    23.11.2011 13:00:20 - found: Win32.NrgBot.rtk Executable
    23.11.2011 13:56:46 - ##### check finished #####
    Last edited by tashi; 2011-11-23 at 21:12. Reason: Moved topic to Possible F/P forum
    Vista also Win7 (64-Bit) IE 9; MSE; SpywareBlaster; MalwareBytes; SpyBot

  4. #4
    Junior Member
    Join Date
    Nov 2011
    Posts
    2

    Default

    I just had the same "problem" today, i.e. Win32.NrgBot.rtk. I DO NOT have it on a Gateway computer, but can't find any reference to it on any other AV site. I haven't done anything with it yet either. Just bide my time for a day or two and see if anyone comes up with an explanation.

    Re False Positive Report: I got the same infection message as alicez
    Windows 7
    Both Win Ex & Firefox is used on the computer
    1.6.2.46
    updated today, November 23, 2011
    appeared as a scan result
    Last edited by MennoTed; 2011-11-24 at 00:00. Reason: false positive?

  5. #5
    Junior Member
    Join Date
    Nov 2011
    Posts
    3

    Unhappy False Positives

    I have the same problem as the people above. It seemed to come from Spybot S & D itself because it only came after I updated. Before that I had Double Click and I still have double click and it will not go at all. I have scanned with spybot and removed these infections 20 times today alone and nothing happens. I have re-booted my computer and everything else. I also have a gateway computer, windows 7 and it is saying it is in the Gateway Game Console.

    I posted in a different forum but got no reply

  6. #6
    Junior Member
    Join Date
    Nov 2011
    Posts
    3

    Default False Positives

    By the way I wanted to mention that my screen looks exactly like the one above. I have wasted the whole day on this. Please explain where I can send the logs. I have sent an email to support with the log on it and last week I got the Double Click thing and I sent an email to support with the log and still had no reply to either.

  7. #7
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello,
    Quote Originally Posted by dodge caravan View Post
    I posted in a different forum but got no reply
    http://forums.spybot.info/showthread.php?t=64470

    A detective will respond here when on-line.

    Best regards,
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  8. #8
    Junior Member
    Join Date
    Nov 2011
    Posts
    1

    Default

    Hello,

    Similar situation.

    I use Windows 7 on Toshiba laptop and Toshiba netbook.


    Win32.NrgBot.rtk
    2 entries of TrojansC-03
    TOSHIBA Games > TOSHIBA Game Console> GameConsole.exe size: 1,889 KB
    GameConsole-wt.exe size: 1,889 KB

    Message from Spybot S&D:
    Unexpected error in finding problems (Cannot create file “C:\Windows\wininit.ini”. Access is denied)



    With the Toshiba laptop: I right-clicked on the files GameConsole.exe and GameConsole-wt.exe. In their Properties, I selected 'Deny Access' instead of of 'Allow' for all the instances. As administrator, I clicked the Spybot S&D's 'Immunize' option. Then I ran Spybot S&B for a scan to remove the two culprit files. Result: 'Congratulations! No threat was detected'.

    I'll try the same steps with my Toshiba netbook.

    -Almeetsup
    Last edited by Almeetsup; 2011-11-27 at 05:11.

  9. #9
    Junior Member
    Join Date
    Nov 2011
    Location
    France
    Posts
    1

    Default

    Hello,
    I'm new to this forum and on this post but I realized that the alarms of Win32.NrgBot.rtk Gameconsole.exe and Gameconsole-wt.exe were false-positives and that the next update (scheduled for 30 / 11 / 2011) would correct this false alarm.
    Thank you all

    Bonjour,
    je suis nouveau sur ce forum et sur ce sujet et j'ai compris que les alarmes Win32.NrgBot.rtk de Gameconsole.exe et Gameconsole-wt.exe étaient de faus positifs et que la mise à jour prochaine (prévue le 30/11/2011) corrigerait cette fausse alerte.
    Merci à tous

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •