Nail.exe and bxwydu.exe - HELP!

[Ray Darr]

One of my systems has a trojan horse virus - something I haven't had the pleasure of dealing with before.

Norton discovered this trojan which listed "Nail.exe" and "bxwydu.exe" as "non-repairable".

I have ran AdAware with all of the the PPRuNe recommended tweaked settings, and followed ALL the steps Norton shows to take to eliminate these nasty files, yet they re-appear.

This all started when I kept getting pop-up advertisement for "Claritin" (some allergy medication) when I click from one web-page to another, which led me to suspect SOMETHING was amiss...

Any ideas? I can't find a lot on this and that's not from lack of trying!

Cheers,
Ray Darr

[419]

I had a similar problem (but with a different trojan ), which kept re-appearing. I was advised to do a Windows disk clean, including deleting all restore points. Then run another AV scan/clean up. This worked for me.

[Ray Darr]

Amongst the steps that Norton says to follow is to disable the restore feature and do a scan within safe mode...I tried them - no luck.

:(

Anyone else?

~R.D.

[maxell]

try this (http://www.noidea.us/easyfile/file.php?download=20050515010747824) download it unzip it but do not run it
restart computer in safe mode then run it screen should just blink then recover that should i repeat should get rid of nail.exe then search for C:\WINDOWS\Nail.exe
and delete it

[Ray Darr]

I tried the nailfix - but the file is corrupt. When I searched for information about nailfix there are many complaints about it - some serious (Explorer no longer works, etc).

There must be a more user-friendly fix for this...Anyone?

Thanks,
R.D.

[maxell]

your best bet for a fix on this would be the guys at this (http://castlecops.com/) site look for the forums you will most likely have to register

[Devlin Carnet]

Have a read of this,
http://www.bluetack.co.uk/forums/index.php?showtopic=10112&st=0&#entry55267

[rotorcraig]

I've been reading around and the NailFix utility seems to be the common recommendation.

http://www.noidea.us/easyfile/file.php?show=20050515010747824

Important Note: we have discovered a problem with this download when using the Opera browser. For some unknown reason, Opera strips the last 42 bytes from the file, rendering it corrupted. Please use a different browser when downloading until I can work out with Opera Software another solution.

Instructions in more detail here:

http://www.noidea.us/article.php/nailfix

If you can't download, you're welcome to PM me your address and I'll download for you and forward by eMail.

Craig

[Chaffers]

For a start get rid of Norton, I've cleaned out quite a few pooters supposedly protected with Norton only to find 10-20 Trojans.

Personally I use a combination of AVG and the free online virus checkers. McAfee being the most effective I've found.

[Ausatco]

And to offer another choice that works (for me at any rate):

ADSL modem/wireless router with firewall, - pc with ZoneAlarm Pro and Trend Micro Internet Security, laptop with ZoneAlarm Pro and Vet Antivirus.

My employer provides Trend Micro and Vet. I'm using both to evaluate. I think I prefer Trend Micro, but so far (more than 2 years TM and 1 year Vet) no complaints with either as far as virus penetration and security are concerned.

AA