Ok, so I notice my system's being a bit sluggish so I open Norton. It says everything is alright. I close the norton console and open adaware. Just as I do this I see "Norton Auto Protect. A Trojan has been detected and automatically deleted". I open Norton again and it says that there have been several errors (automatic live update, script blocking and auto protect have rather failed or partially failed.) I restart my computer and all SEEMS fine, but I don't know for how long .

Anyone know what virus this sounds like? I didn't download ANYTHING that could have caused this so it might be through a security flaw or something.
Microsoft Windows XP Media Center Edition 2005.
Norton Anti-virus 2004 Pro with all updates.
Ad-aware 6.0 SE

Note: I'm doing a full system virus, adware and spyware scan right now.

Well before it got deleted you must have gotten a message in wich the name of the trojan is mentioned.

You may wanna run Avert Stinger aswell.

quote:

---

Originally posted by Sunshine
Well before it got deleted you must have gotten a message in wich the name of the trojan is mentioned.

---

Just to be on the safe side, do a full scan each day for a few days, and check through all ur documents, a C:/ file for anything unusual.
Whatever it was, it may not be gone, so you need to be safe.

quote:

---

Originally posted by TashaJ
Just to be on the safe side, do a full scan each day for a few days, and check through all ur documents, a C:/ file for anything unusual.
Whatever it was, it may not be gone, so you need to be safe.

---

You'd better secure everything down firmly in your house. Make sure to fully cover your computer in garbage bags for this will help prevent further spreading. I also recommend making a protective trojan beanie out of tin foil. You never know when it might get you..................

LAMO sorry

Unplug any phone lines from your computer for a couple of days until you think it’s gone. Some times they will dial phone numbers out to the hacker. Also if you notice strange things happening on your comp, immediately unplug your internet connection to cut off the attacker if he’s in your comp. Just common sense to do that any way.

So you want me to go without internet for a few days for no apparent reason?

Check the quarantine, it should save a backup of the file incase it was needed, for repairing or submitting to SARC.

A real good site for scanning is Trend Micro. The other thing you can try is a program dedicated to trojans called The Cleaner its made by a comany called MooSoft

Thanks Matty - trying "The Cleaner" now.

i went to the trend micro site and they detected worms...its says its not serious but is it bad...and how could i get rid of them?

My system is obviously not clean - firefox just closed for no reason.

quote:

---

Originaly Posted By: blade
So you want me to go without internet for a few days for no apparent reason?

---

quote:

---

Originaly posted by: blade
My system is obviously not clean - firefox just closed for no reason.

---

quote:

---

Orginaly posted by: DJeX
I also recommend making a protective anti-trojan beanie out of tin foil. You never know when it might get you..................

---

and obviously noone heard what i said either

Found what it's called

"Trojan.ByteVerify"

Info on the virus from Norton.

http://securityresponse.symantec.com/avcenter/ven...an.byteverify.html

The virus comes through a hole in Microsoft VM

quote:

---

Originally posted by DJeX
Info on the virus from Norton.

http://securityresponse.symantec.com/avcenter/ven...an.byteverify.html

The virus comes through a hole in Microsoft VM

---

quote:

---

Originally posted by blade

quote:

---

Originally posted by DJeX
Info on the virus from Norton.

http://securityresponse.symantec.com/avcenter/ven...an.byteverify.html

The virus comes through a hole in Microsoft VM

---

I know


I'm TRYING to remove it right now.

---

Chaotic_Shield is right.

Ya, I know that

I'm going to remove it then do another scan after that one with my internet connection off.

Oh yeah, forgot to mention this, but update your virus definitions. My school just got absolutely owned by a worm, and Symantec released a virus update for those of us smart enough to keep our antiviruses on over the holidays.

i keep hearing bad stuff about worms and i found a couple in my computer and dont know how to get rid f them

quote:

---

Originally posted by Chaotic_Shield
Oh yeah, forgot to mention this, but update your virus definitions. My school just got absolutely owned by a worm, and Symantec released a virus update for those of us smart enough to keep our antiviruses on over the holidays.

---

quote:

---

Originally posted by ~!dylan!~
i keep hearing bad stuff about worms and i found a couple in my computer and dont know how to get rid f them

---

what Norton do you have Blade?  read Norton packages below 2005 have  a Major problem with it, , i'd even use other antivirus cleaners ,  other than trend Micro,   ,, just aswell for linux, win32 Virus cant effect it

I have 2004.

I have other protection too. I think I'm good now .

does Firefox Load?.. if it doesnt try Safe Mode , you do have umm the Bookmark backup extension dont you? an or Profile backup Extension?

quote:

---

Originally posted by Demz
does Firefox Load?.. if it doesnt try Safe Mode , you do have umm the Bookmark backup extension dont you? an or Profile backup Extension?

---

quote:

---

Originally posted by blade
I think I'm good now .

---

i have norton 2005 i think

2005 an newer products rnt effected by the Major problem, which can be read on the http://www.neowin.net/ website

I know, but my 2004 subscription hasn't expired yet. I'll upgrade when it does.

i dont use Norton since end of 2003 suscription ran out   ,, but yeah better to wait, Maybe 2006 might be out by the time you do update it

Dylan:
First of all do a windows update, this will close all the holes (bropia came into your computer by a file you accepted and opened through MSN Messenger). Also it's very important to keep your AV up to date.



Bropia Removal tool
info and removal instructions SDbot
removal instructions RBOT
info and removal instructions KIPIS
I also advice you to run Avert Stinger, this one will remove most worms and trojans (incl. Mydoom).

Good luck!

Yay for