Jump to content
bigtrucks

Trojan.Unclassified-Packed/Suspicious.Process

Recommended Posts

OK! So I ran a scan twice on my lap and this came up: Trojan.Unclassified-Packed/Suspicious.ProcessI let SAS clean it out only to find it wasn't in the quarantine logs and that it popped back up the second time I ran the scan.When I Googled it I did find that some one else that use SAS had the same thing.They posted Here. My dilemma is I can't seem to find the path that it(SAS) claims it is in to Run a virus scan on it.

Here is the path SAS shows it in:

c:\users\user\appdata\roaming\mozilla\firefox\profiles\C4UZH278.Default\Extensions\{38AB6A6C-CC4C-4F4E-A3DD-3C5681EF18A1}\PLUGINS\NPSOE.DLLc;\users\user\appdata\roaming\mozilla\firefox\profiles\C4UZH278.Default\Extensions\{38AB6A6C-CC4C-4F4E-A3DD-3C5681E

How do I find it and how do I get rid of it?

Thanks

BT

Share this post


Link to post
Share on other sites

Hi Bigtrucks.

Please be be sure SAS is fully updated and run the scan again.

If the file shows up following that, please post the SAS log.

Share this post


Link to post
Share on other sites

OK! So I ran a scan twice on my lap and this came up: Trojan.Unclassified-Packed/Suspicious.ProcessI let SAS clean it out only to find it wasn't in the quarantine logs and that it popped back up the second time I ran the scan.When I Googled it I did find that some one else that use SAS had the same thing.They posted Here. My dilemma is I can't seem to find the path that it(SAS) claims it is in to Run a virus scan on it.

Here is the path SAS shows it in:

c:\users\user\appdata\roaming\mozilla\firefox\profiles\C4UZH278.Default\Extensions\{38AB6A6C-CC4C-4F4E-A3DD-3C5681EF18A1}\PLUGINS\NPSOE.DLLc;\users\user\appdata\roaming\mozilla\firefox\profiles\C4UZH278.Default\Extensions\{38AB6A6C-CC4C-4F4E-A3DD-3C5681E

How do I find it and how do I get rid of it?

Thanks

BT

Please post your scan log here.

Share this post


Link to post
Share on other sites

Seth and Admin,

Thank you for your replies and help. It's good to know I can get a quick response from SAS.

I found the issue/problem to my dilemma. I was trouble shooting a temporary black screen event and was running security scans as well as other programs. When I was disabling the restore point after running a program I accidentally turned on the Recovery drive as well(to restore) and it caused a false positive. After un-ticking it(Recovery drive) and running SAS it never showed back up. Needless to say I found the black screen problem is the notorious hp Half baked job of putting the video card next to the CPU, Which, in this particular model gets Hot,and with out the pins to hold it in place, PLUS, putting the MOBO upside down(where the chips are underneath)the solder on the video chip gets hot and it loses connection thus when trying to restart for say the monthly updates after having the lap run for a while, the lap boots but the video does not.My son's tech explained this and said he could fix this for $80. but could not guarantee it would work.He has done this on a couple of laps with this prob and the shortest it has lasted is 2days. The longest was a little over a year.Seeing how this was my daughters lap she has chosen to save her money and get a new lap top.

Have been a faithful user for years and have told others and downloaded SAS on others computers and will continue to do so.

KUDOS to SASgreat.gif

Regards

BT

Share this post


Link to post
Share on other sites

You're welcome.

We often ask for the scan log for two main reasons:

1) To confirm the customer is using the latest numeric version of SAS.

2) To identify the exact type, name, and path of the infection.

Thanks for the update. We'll keep your findings in mind :-)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×
×
  • Create New...