Trojaner Win32:Nimosw-D

Hello, may someone can help me.
Avast found on a Game dvd a Trojan!
Win32:Nimosw-D
now i like to install and play the game, but i didnt find anything about this trojaner, is he dangerous? ??? I didnt find anything about this Trajan in the www :frowning:
when i intall and scan with avast, and avast remove the Trojan i cant play the game anymore, it crash and i cant play it :-[
Someone an idea about this Trojaner?
Thanks :slight_smile:

You should check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner and report the findings here. I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently over 30 different scanners.

If it is indeed a false positive, add it to the exclusions lists:
Standard Shield, Customize, Advanced, Add and
Program Settings, Exclusions
Restore it to its original location, periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.

Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and false positive in the subject.

Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t alrready in the chest) where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest. A copy of the file/s will remain in the original location, so any further action you take can remove that.

Thank you DavidR,
i try all but the case is too big! i zip it but it stays too big :frowning:
noe i like to send it per e-mail to Avast, but what passwort do you mean??

Is it the installation file that is detected or a file within the installation file ?

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections.

You need to password protect the zip file you attach to your email to virus @ avast . com so other email scanners/servers can’t scan it and possibly detect and delete the attachment.

I too know nothing about this trojan, but I do know I wouldn’t want to install any game where there was any suspicion at all of there being a trojan in it. Where did you get the DVD ?

Update I have checked some aliases for this malware name (as google wasn’t too helpful in a search for it), see image. You could try a search on some of the other aliases and see what it brings up. I not that Kaspersky reports a not a virus prefix for the malware name, so I don’t know if that is reliable.

Thank you DavidR, :slight_smile:
it is an original game dvd :D, the name is: Dungeon Quest, i bought it in a on-lineshop, it is an original! unbelievable >:( i write to the maker of this dvd, but no answer.

It sounds very like it could be a false positive detection. Though it is large are you able to send it to avast for analysis and hopefully correction ?

The full file name and its location from the avast log viewer may be helpfull for those doing the analysis. You should also give the URL for this topic in the email to avast.