MSN Toolbar found VIRUS

[MaxYMiller]

Norton detected W32.Netsky.Q@mm when MSN Toolbar was indexing.

The virus was in C:\Documents and Settings\Owner\Local Settings\Application Data\MSN Toolbar Suite\DS\Temp\rssgthrsvc\c34_9d0_10f_msg28730.zip

Any idea where that original file (It might be from some emails, I'm not sure)?

The problem is that original file (with virus inside) probably still exist somewhere.

Please advice.

Thanks.

[JustGeorge]

Can't you just do a standard file/folder search for "c34_9d0_10f_msg28730.zip"? Maybe just try going to the directory? Did Norton say what action it took on the file?

[MaxYMiller]

Can't you just do a standard file/folder search for "c34_9d0_10f_msg28730.zip"? Maybe just try going to the directory? Did Norton say what action it took on the file?

585506292[/snapback]

It is empty temp folder for MSN Toolbar indexing.

And Norton removed that temp zip file.

Edited February 20, 2005 by MaxYMiller

[Slimy]

do a full scan with norton

do a full online scan using something like housecall

if norton doesn't find anything but the online scan does, that tells you something about your av

[MaxYMiller]

do a full scan with norton

do a full online scan using something like housecall

if norton doesn't find anything but the online scan does, that tells you something about your av

585506471[/snapback]

Full scan didn't catch it.

Norton did stop this virus, BUT only when it was decompressed to its final zip file.

What antivirus can detect double, triple, etc compressed virus? I don't think you can find such one.

But question is where that original file still sits on HD. How can I catch it?

[Slimy]

http://housecall.trendmicro.com/

[macmax]

Is the bug fixed in Norton when the .zip is broken ? av's dont scan it properly ...

try a different antivirus like Kaspersky or NOD just to be sure ur safe

[JustGeorge]

I know in SAV 8 you could configure how many levels deep to scan a file, but don't think you can do that with Norton.

[MaxYMiller]

I know in SAV 8 you could configure how many levels deep to scan a file, but don't think you can do that with Norton.

585507447[/snapback]

What's the SAV?

Symantec AntiVirus? Isn't it the same Norton AntiVirus?

[Slimy]

What's the SAV?

Symantec AntiVirus? Isn't it the same Norton AntiVirus?

585507550[/snapback]

nope, symantec av is for corporations, it is lighter on the resources and is much better imo than the home version, norton av, which is slower, takes more resources and is often not effective with its protection

[moogoat]

so home users can't get the SAV version?

[JustGeorge]

Hard to get the legal way due to price. Symantec are mighty proud of that AV! Some colleges offer it cheap, other than that you must buy a certain number of Licenses.

[MaxYMiller]

I've found it.

It was outlook one of .dbx files, which had email with attached infected zip file.

Norton AV for some reasons didn't scan .dbx files.

[MrBear5587]

Are the updates for SAV daily? As Norton's updates are weekly. Autoupdates im talking about