Trojan, Generic (NvCplDaemon) ??

[ProTruckDriver]

SD found the following on my computer:
Threat Name: Trojan, Generic
Type: Registry Value
Risk Level: Medium
Infection: HKEY_Local_Machine\Software\Microsoft\Windows\Curr entversion\Run,
NvCplDaemon.

Anyone know of this Infection ?
Is it a F/P ?

[sulliman24]

I am honestly not sure, but if you do a google search for just NvCplDaemon it will tell you that it relates to your Nvidia Video Card driver. I don't know if this is truly an infection or not so be sure to wait for AChen to assist you:cool:

[markofkane]

I have it, but is not flagged as an infection. (I don't use SD now) However, some malware makers will disguise a trojan or other malware as legit processes. If you have an Nvidia Card and software, it could be a false positive.

Looks to me it's in your startup. I use a program called "Codestuff Starter" to disable programs from starting up with my computer. I have NvCplDaemon disabled. I don't use the Nvidia software, just the drivers.

But you should wait until you get a professional opinion on this. :D

[ProTruckDriver]

Under Computer Information, Video Card: Model: NVIDIA GeForce 7300 LE, Driver: nv4_mini.sys, Tuesday, August 16, 2005 Supported. ( I guess it came installed with the new computer). When I do a search for NVIDIA, it comes up with files from ROXIO 10 CREATOR SUITE. ( That I installed a few months ago). I put the infected (?) file on the Global Action List (Allow) until I hear word from AChen. :confused:

[ProTruckDriver]

Anthony, any idea what to do with this file that SD is calling a infection?
(GAL: Allow/Block, Quarantine) :)

[AChen]

Hi Guys,

ProTruckDriver, could you please send us your History file, so that we can see exactly what Spyware Doctor is currently detecting.

To send a History file:

1. In Spyware Doctor, click on 'Settings'
2. Click on 'History'
3. Click on 'Save to File'
4. Save the file onto your desktop (or any other location) as history.html
5. Attach the saved file to this thread or you can send this to my email address :)

[haapy]

I would also suggest that you go to www.nvidea.com and download the latest drivers. Fixes a lot.

[ProTruckDriver]

History File Today:

[AChen]

History File Today:

Could you please attach the History File (.htm file) because we need the exact key name :)

[sickofmaleware]

Hi,

I'm a new member to this forum. I happen to have the same problem. When I use SD to scan my computer it comes up with NvCplDaemon as a Generic.Trojan. There's also another Trojan that I'm not so sure about. Although I'm pretty sure they're both not really Trojans. Please confirm. Thanks. :)

[ProTruckDriver]

sickofmaleware,

I have installed on both of my computers: Video Card: Model: NVIDIA GeForce 7300 LE (Limited Edition) and S/D hit it for a Trojan. I put it in the Gobal Action List (Allowed). I would suggest to do what haapy posted and download the latest drivers for your Video Card, that may help. I haven't done it yet because I'm in the process of Reformatting both computers. To me it looks like the Limited Edition of NVIDIA is giving it a FP. Try updating the drivers. :)

[AChen]

Hi,

I'm a new member to this forum. I happen to have the same problem. When I use SD to scan my computer it comes up with NvCplDaemon as a Generic.Trojan. There's also another Trojan that I'm not so sure about. Although I'm pretty sure they're both not really Trojans. Please confirm. Thanks. :)

Could you go to the registry key that's being detected and get a screenshot of this. You can do this by going to Start-> Run-> regedit and post the screenshot on this thread. The reason why is that the detected infection might be using a legitimate key to point to an infection.

[sickofmaleware]

I have the screenshots for both registry keys. I know how to put Carina into the Global Action List, just not sure how to do it with NvCplDaemon. Thanks. :)

[AChen]

Thanks for the SS :)
I have passed this on to have it investigated further. Will get back to you shortly.

[thetotalitsolution.com]

I am also getting a message this morning from my PC Dr w/ AV telling me that it found 2 Trojan.Generic infections. One in NvCplDaemon, and the other in NvMediaCenter. Both were found as registry entries...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run , NvCplDaemon
HKLM\Software\Microsoft\Windows\CurrentVersion\Run , NvMediaCenter

Thanks in advance for any help/information.

Allan.
http://www.thetotalitsolution.com

[AChen]

Hi Guys,

This has been resolved and should be available in the next update :)

[thetotalitsolution.com]

Thanks, that's excellent news. Does this mean we should ignore PC Dr's finding generic trojans in the 2 NVidia files? Any help on this would be appreciated.

Thanks,
Allan.
www.thetotalitsolution.com