Win32:Trojan-gen. {VC} and Keiro FW

Viruses and worms
1

Hi,

I just got a Sign of “Win32:Trojan-gen. {VC}” has been found in “C:\Programme\EbatesMoeMoneyMaker\EbatesMoeMoneyMaker.exe” file.

It somehow starts a nhupdater.exe, communicates to www.navexcel.com and other ip-addresses. Moreover, there is a suspicous tool started called NavHelper and if you try to lookup that tool from the develper (www.navexcel.com) you get a html downloaded wich seem to corrupt the Keiro Firewall (see attached download.html as “bmp”, I can send if needed).

Any help? I probably will reinstall Keiro FW after cleaning the mess.

Don’t know wherefrom …

Thanks,

Bob

2

NavHelper is known as spyware class program.
avast! detected the right thing. Anyway if you have problems with Kerio FW,you should re-install it.