Windows 7: Question about Windows file.

Cycrole · 13 Aug 2012

My question is whether the file Nashy is important to the system?
It located at C:\Windows...... So i am not sure if i have to delete it.
My anti virus show me it as virus.Btw Its the first time it tell me that file is a virus,
i have this computer 2 years.

logicearth · 13 Aug 2012

Okay...so...how come you don't tell us what this file is called?

Dwarf · 13 Aug 2012

We need the correct full filename (including the extension) and the complete location path.

Cycrole · 13 Aug 2012

Full name : Nashy.exe
Lacation:C:\Windows

Layback Bear · 13 Aug 2012

Well Nashy.exe is most likly a virus. Do this.
Windows Defender Offline
Let us know the results and findings.

Alejandro85 · 13 Aug 2012

In my system, it doesn't even exists. Most likely it's a virus. Look at msconfig if it autoruns at startup and if it's running currently in task manager. If so, delete it right now. Moreover, if after deletion it automagically appears again, it's time to get a good antivirus.

Golden · 14 Aug 2012

Upload the file here for analysis, and prepare to be alarmed:
https://www.virustotal.com/

Jacee · 14 Aug 2012

This is a Backdoor Trojan. You will need to change all of your passwords using a known 'clean' computer, do not do this using the infected one!

Quote:

Backdoor.Bifrose.afmt

Backdoor.Bifrose.afmt is a backdoor Trojan that provides an unauthorized user with some remote control over your system, making it possible to capture your personal information through accessing your files. Backdoor.Bifrose.afmt is a Trojan horse with back door capabilities. It also logs keystrokes and steals sensitive information, which can be sent to a remote server. Through Backdoor.Bifrose.afmt, and it being a backdoor Trojan that provides an unauthorized user with some remote control over your system, it could make it possible for the hacker to capture your personal information through accessing your files. The anonymous hacker may upload, download, and delete files stored on your hard drive. Your computer's security and stability may be further decreased as Backdoor.Bifrose.afmt may download other applications. The most common spyware removal tactic is to uninstall Backdoor.Bifrose.afmt by using the "Add/Remove Programs" utility. However, as there may still be hidden Backdoor.Bifrose.afmt files, it's possible that Backdoor.Bifrose.afmt will reappear after reboot. Backdoor.Bifrose.afmt is a serious threat to the security of your personal and financial data and it is recommended to get rid of it immediately

I'd like you to scan your machine with ESET OnlineScan

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
1. Click on to download the ESET Smart Installer. Save it to your desktop.
2. Double click on the icon on your desktop.
Check
Click the button.
Accept any security warnings from your browser.
Check
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push
Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Push the button.
Push

Windows 7: Question about Windows file.

Question about Windows file. problems?