topic Re: unusual tracking cookie? in Norton Internet Security / Norton AntiVirus

unusual tracking cookie?

NY1986 — Thu, 26 Feb 2009 21:27:33 GMT

First I know for the most part, tracking coookies are not a MAJOR security issue. But the last few scans (full and quick) have found this rather strange cookie noted asfound. Given recent possible infection of my machine, I thought I would get feedback on this.

Usually when the tracking cookies are found, they log as such:

for example

JoeSmith@ atdmt or JoeSmith @NHL.com or JoeSmith @Norton

but this is the strange one I found

Orphan Cleanup

does not note my PC or a place

can anyone shed light on this? Is this a bigger issue of security?

Re: unusual tracking cookie?

GrandPrixSC — Thu, 26 Feb 2009 22:16:32 GMT

First of all there is absolutely no reason to run a scan everyday. My NIS 2009 runs a full scan every 7 days by default. Cookies are harmless and all you need is CCleaner to empty out your cookies. Simply Google "cookies". Empty your cookies before you scan and you will be fine. Stop being so paranoid honestly.

Re: unusual tracking cookie?

Phil_D — Thu, 26 Feb 2009 22:32:45 GMT

In today's internet world, I would not want to stand in judgment of anyone who chooses to perform a daily scan. Although it may not be the mainstream practice, NY1986 did pick up the w32.IRCbot a few days ago during a daily scan.

In the first sentence of the post, NY1986 acknowledges that tracking cookies are not a major security issue. Also outlined is the "normal appearance" of past tracking cookies that have been found. However, the item "Orphan Cleanup" is an unusual entry and worthy of inquiry.

Admittedly, I have not seen that entry before and I am glad the question was raised.

Re: unusual tracking cookie?

GrandPrixSC — Thu, 26 Feb 2009 22:39:33 GMT

Agreed but the reason for the infection should be looked at. I have never been infected in well over 7 years now. Smart surfing habits go along way. It is not that easy to get infected unless your a click happy person.

Re: unusual tracking cookie?

NY1986 — Fri, 27 Feb 2009 00:00:09 GMT

I'm just trying to understand this strange tracking cookie that was picked up. I wonder if it is due to going to a site login, but not actually logging in? Thus it "starts" some semblence of a cookie?

Re: unusual tracking cookie?

GrandPrixSC — Fri, 27 Feb 2009 00:34:44 GMT

Which brings up the question. Why would you visit or log into a site that you have no idea what it is.

Re: unusual tracking cookie?

Phil_D — Fri, 27 Feb 2009 00:43:23 GMT

GrandPrixSC wrote:
Which brings up the question. Why would you visit or log into a site that you have no idea what it is.

The original poster never said that. Please read the post before making commentary.

Re: unusual tracking cookie?

NY1986 — Fri, 27 Feb 2009 20:36:43 GMT

the site I went to log on with out a log on id was a site my wife uses for a home based business. She has the password. I was just seeing if that type of situation- going to the login page of a site is what would cause the starnge cookie issue

My only reason for concern on this item

cookie: orphan cleanup

is that I possibly and I now say possibly have been infected with the W32.IRCbot. However, that happened 2/21/09 and this cookie issues just started 2/25/08

Re: unusual tracking cookie?

ETN_TC — Fri, 27 Feb 2009 22:19:35 GMT

I have also just detected this tracking cookie ( Orphan Cleanup). I just installed Norton Antivirus 2009 and the first scan I did detected it.

I usually set my browser to reject future cookies from the offending domain but, as you said, this one is unusual as it has no domain name.

Hopefully, the Norton people can figure out where it is coming from.

Re: unusual tracking cookie?

TooStrong — Fri, 27 Feb 2009 22:50:36 GMT

I am detecting this also (Orphan Cleanup)since yesterday.

I have also noticed that when I used to do a scan and tracking cookies were found, let's say 2 cookies, NIS would say 2 cookies removed but only show 1. This happened everytime since I downloaded NIS 209 in October of 2008. No matter how many cookies it found, it would list 1 less than the number deleted. Since yesterday, when I do a quick scan, if there are any cookies, let's say 3, well it shows all 3, 2 plus the orphan cleanup. Plus I also play games on pogo.com. and up until yesterday, Any time I did a quick scan at the end of the day it would show 3 pogo tracking cookies detected and deleted. As of yesterday, NIS 2009 no longer deletes them or shows them as a tracking cookie. But I know they are there on my system because I also run ccleaner and it shows them as cookies and I delete them there.. So there might be some changes with the way NIS 2009 handles the tracking cookies since yesterday, or how the tracking scan works. but I don't know. This is what I am seeing on my computer.

Re: unusual tracking cookie?

GreatNate1312 — Fri, 27 Feb 2009 22:50:40 GMT

I am a long time norton user today I did a quick scan and orphan cleanupwas one of the cookies detected, can someone please help us out here?

Re: unusual tracking cookie?

GreatNate1312 — Fri, 27 Feb 2009 23:25:01 GMT

orphan cleanup keeps coming back for me to!!!

Re: unusual tracking cookie?

NY1986 — Fri, 27 Feb 2009 23:59:26 GMT

Ok all lots not panic (thats my role :) ) Seriously, if others are detecting this, then it most likely is ok. I had wondered if tracking cookie detection has gotten more aggressive which would be cool

Because I may have been infected I thought I was alone with this, but I can see that others have it too, unless you all downloaded trial games from bigfishgames.com

But when time allows, maybe a Norton staffer can give us the lowdown

Re: unusual tracking cookie?

NY1986 — Sat, 28 Feb 2009 00:27:26 GMT

by the way, don't post a question about orphan cookies on yahoo answers. All you get is smart @$$ answers

Re: unusual tracking cookie?

GreatNate1312 — Sat, 28 Feb 2009 00:34:24 GMT

oh how funny, I was just recently on yahoo awnsers and saw that question. Guess I know who wrote it now

Re: unusual tracking cookie?

NY1986 — Sat, 28 Feb 2009 00:37:29 GMT

or maybe not?? It could be one of the others on here?

Really though this forum is great. I was going to move on to another AV, but then I stumbled on here and felt that I get good service

Re: unusual tracking cookie?

Phil_D — Sat, 28 Feb 2009 01:04:41 GMT

Hi folks,

Is the Orphan Cleanup listed as a Tracking Cookie?

Re: unusual tracking cookie?

mo — Sat, 28 Feb 2009 01:26:34 GMT

Just letting you know I had it turn up in my Quick scan,The only place we have been to today is a online game site.Phil sorry I did not note what it was,but I will check it out after I go back to the site I think it came from.

Re: unusual tracking cookie?

mo — Sat, 28 Feb 2009 01:54:10 GMT

Hi Phil

Yes it is a tracking cookie.

Re: unusual tracking cookie?

Phil_D — Sat, 28 Feb 2009 02:03:38 GMT

Is it a site which you have to log onto?

[edit:grammar mistake in a one liner!]

Message Edited by Phil_D on 02-27-2009 09:03 PM