Neowin Forums > MSN Toolbar found VIRUS

Neowin Forums > Help & Discussion Center > Software Discussion & Assistance

MaxYMiller

Feb 20 2005, 21:30

Norton detected W32.Netsky.Q@mm when MSN Toolbar was indexing.

The virus was in C:\Documents and Settings\Owner\Local Settings\Application Data\MSN Toolbar Suite\DS\Temp\rssgthrsvc\c34_9d0_10f_msg28730.zip

Any idea where that original file (It might be from some emails, I'm not sure)?

The problem is that original file (with virus inside) probably still exist somewhere.

Please advice.
Thanks.

VRam

Feb 20 2005, 21:41

Can't you just do a standard file/folder search for "c34_9d0_10f_msg28730.zip"? Maybe just try going to the directory? Did Norton say what action it took on the file?

MaxYMiller

Feb 20 2005, 21:47

QUOTE(denzilla @ Feb 20 2005, 21:41)

Can't you just do a standard file/folder search for "c34_9d0_10f_msg28730.zip"? Maybe just try going to the directory? Did Norton say what action it took on the file?
[right][snapback]585506292[/snapback][/right]

It is empty temp folder for MSN Toolbar indexing.
And Norton removed that temp zip file.

Slimy

Feb 20 2005, 22:26

do a full scan with norton
do a full online scan using something like housecall
if norton doesn't find anything but the online scan does, that tells you something about your av

MaxYMiller

Feb 20 2005, 22:46

QUOTE(slimy @ Feb 20 2005, 22:26)

do a full scan with norton
do a full online scan using something like housecall
if norton doesn't find anything but the online scan does, that tells you something about your av
[right][snapback]585506471[/snapback][/right]

Full scan didn't catch it.
Norton did stop this virus, BUT only when it was decompressed to its final zip file.

What antivirus can detect double, triple, etc compressed virus? I don't think you can find such one.

But question is where that original file still sits on HD. How can I catch it?

Slimy

Feb 20 2005, 23:15

http://housecall.trendmicro.com/

mohan_168

Feb 20 2005, 23:22

Is the bug fixed in Norton when the .zip is broken ? av's dont scan it properly ...
try a different antivirus like Kaspersky or NOD just to be sure ur safe

VRam

Feb 21 2005, 01:57

I know in SAV 8 you could configure how many levels deep to scan a file, but don't think you can do that with Norton.

MaxYMiller

Feb 21 2005, 02:24

QUOTE(denzilla @ Feb 21 2005, 01:57)

I know in SAV 8 you could configure how many levels deep to scan a file, but don't think you can do that with Norton.
[right][snapback]585507447[/snapback][/right]

What's the SAV?
Symantec AntiVirus? Isn't it the same Norton AntiVirus?

Slimy

Feb 21 2005, 02:32

QUOTE(MaxYMiller @ Feb 20 2005, 21:24)

What's the SAV?
Symantec AntiVirus? Isn't it the same Norton AntiVirus?
[right][snapback]585507550[/snapback][/right]

nope, symantec av is for corporations, it is lighter on the resources and is much better imo than the home version, norton av, which is slower, takes more resources and is often not effective with its protection

moogoat

Feb 21 2005, 02:38

so home users can't get the SAV version?

VRam

Feb 21 2005, 02:47

Hard to get the legal way due to price. Symantec are mighty proud of that AV! Some colleges offer it cheap, other than that you must buy a certain number of Licenses.

MaxYMiller

Feb 22 2005, 20:08

I've found it.
It was outlook one of .dbx files, which had email with attached infected zip file.

Norton AV for some reasons didn't scan .dbx files.

Cytoned

Feb 22 2005, 21:15

Are the updates for SAV daily? As Norton's updates are weekly. Autoupdates im talking about

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.