Page 1 of 2 12 LastLast
Results 1 to 10 of 20

Thread: Two Infections found-Win32.NrgBot.rtk.

  1. 2011-11-23, 20:20 #1
    alicez
    alicez is offline
    Senior Member alicez's Avatar
    Join Date
    Apr 2008
    Posts
    179

    Default Two Infections found-Win32.NrgBot.rtk.

    #3- Don't know what is going on!!!!
    I downloaded 11/23/2011 def updates and ran a scan on my Win 7 (64-Bit) computer and the scan came up with these two infections. Does anyone know what they might refer to? The state that they are Gateway Games, etc. (This is a Gateway computer).
    Could they be false/positives? What should I do with them?
    I didn't do anything with them, I just closed the S&D program.

    Win32.NrgBot.rtk
    SBI $9DB9AE9D Execitab;e
    C"\Program Files (86X) Gateway Games\Gateway Game Console\GameConsole-wt.exe

    Win32.NrgBot.rtk
    SBI $9DB9AE9D Execitab;e
    C"\Program Files (86X) Gateway Games\Gateway Game Console\GameConsole.exe


    http://imageshack.us/phot...images/405/spybotsd.jpg/
    Vista also Win7 (64-Bit) IE 9; MSE; SpywareBlaster; MalwareBytes; SpyBot
    Reply With Quote Reply With Quote
  2. 2011-11-23, 21:01 #2
    tashi
    tashi is offline
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,959

    Default

    Hello alicez,

    The link you provided gives a '404 Not Found'

    How to report Possible False Positives
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016
    Reply With Quote Reply With Quote
  3. 2011-11-23, 21:04 #3
    alicez
    alicez is offline
    Senior Member alicez's Avatar
    Join Date
    Apr 2008
    Posts
    179

    Default

    I am new at all of this and so not too familiar with what is going on.
    I tried to Edit my thread, but was unable to do so.
    You explanation is very confusing to me. Where do I send the "screen-shot"



    http://imageshack.us/photo/my-images/560/spybotsd.jpg/

    The box in the middle reads:
    Fileinfection detected removing these may damaga your computer. If possible restart to a clean restore point or system backup.

    ((I really don't want to do a System Restore if I don't have to!)

    23.11.2011 12:50:57 - ##### check started #####
    23.11.2011 12:50:57 - ### Version: 1.6.2
    23.11.2011 12:50:57 - ### Date: 11/23/2011 12:50:57 PM
    23.11.2011 12:51:01 - ##### checking bots #####
    23.11.2011 13:00:20 - found: Win32.NrgBot.rtk Executable
    23.11.2011 13:00:20 - found: Win32.NrgBot.rtk Executable
    23.11.2011 13:56:46 - ##### check finished #####
    Last edited by tashi; 2011-11-23 at 21:12. Reason: Moved topic to Possible F/P forum
    Vista also Win7 (64-Bit) IE 9; MSE; SpywareBlaster; MalwareBytes; SpyBot
    Reply With Quote Reply With Quote
  4. 2011-11-23, 23:52 #4
    MennoTed
    MennoTed is offline
    Junior Member
    Join Date
    Nov 2011
    Posts
    2

    Default

    I just had the same "problem" today, i.e. Win32.NrgBot.rtk. I DO NOT have it on a Gateway computer, but can't find any reference to it on any other AV site. I haven't done anything with it yet either. Just bide my time for a day or two and see if anyone comes up with an explanation.

    Re False Positive Report: I got the same infection message as alicez
    Windows 7
    Both Win Ex & Firefox is used on the computer
    1.6.2.46
    updated today, November 23, 2011
    appeared as a scan result
    Last edited by MennoTed; 2011-11-24 at 00:00. Reason: false positive?
    Reply With Quote Reply With Quote
  5. 2011-11-24, 02:15 #5
    dodge caravan
    dodge caravan is offline
    Junior Member
    Join Date
    Nov 2011
    Posts
    3

    Unhappy False Positives

    I have the same problem as the people above. It seemed to come from Spybot S & D itself because it only came after I updated. Before that I had Double Click and I still have double click and it will not go at all. I have scanned with spybot and removed these infections 20 times today alone and nothing happens. I have re-booted my computer and everything else. I also have a gateway computer, windows 7 and it is saying it is in the Gateway Game Console.

    I posted in a different forum but got no reply
    Reply With Quote Reply With Quote
  6. 2011-11-24, 02:21 #6
    dodge caravan
    dodge caravan is offline
    Junior Member
    Join Date
    Nov 2011
    Posts
    3

    Default False Positives

    By the way I wanted to mention that my screen looks exactly like the one above. I have wasted the whole day on this. Please explain where I can send the logs. I have sent an email to support with the log on it and last week I got the Double Click thing and I sent an email to support with the log and still had no reply to either.
    Reply With Quote Reply With Quote
  7. 2011-11-24, 03:17 #7
    tashi
    tashi is offline
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,959

    Default

    Hello,
    Quote Originally Posted by dodge caravan View Post
    I posted in a different forum but got no reply
    http://forums.spybot.info/showthread.php?t=64470

    A detective will respond here when on-line.

    Best regards,
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016
    Reply With Quote Reply With Quote
  8. 2011-11-24, 08:13 #8
    Yodama
    Yodama is offline
    Senior Member Yodama's Avatar
    Join Date
    Oct 2005
    Location
    Buchenheim
    Posts
    1,110

    Default

    Hello,

    Win32.NrgBot.rtk has the ability to attach itself to legit files, thus infecting them.
    Since your reports indicate a possibe false positive with Gateway Game Console please do the following to make sure it is only a false positive:
    • right click the scan result within Spybot S&D and save a full report
    • zip the files in question and attach both the full report and the zipped files to an email addressed at detections@spybot.info
    • link this thread in you email for quick reference
    born in the shadow to die in the shadow, that is the fate of the shinobi

    Spybot S&D Downloads

    Please help us improve Spybot and download our distributed testing client.
    Reply With Quote Reply With Quote
  9. 2011-11-24, 18:33 #9
    LorettaS
    LorettaS is offline
    Junior Member
    Join Date
    Nov 2011
    Posts
    1

    Default

    I also had the same problem today on a Win 7 computer although I have it in HP Game Console. Updated and scanned Win XP computer and it was ok. After detection Spybot got hung up scanning and I had to close it.
    Reply With Quote Reply With Quote
  10. 2011-11-24, 18:51 #10
    Winnmp
    Winnmp is offline
    Junior Member
    Join Date
    Nov 2011
    Posts
    2

    Default

    Quote Originally Posted by LorettaS View Post
    I also had the same problem today on a Win 7 computer although I have it in HP Game Console. Updated and scanned Win XP computer and it was ok. After detection Spybot got hung up scanning and I had to close it.
    I also had this issue, but I removed HP Game Console, and it then disappeared.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules