Reply
Regular Contributor
LazarusLong
Posts: 82
Registered: ‎06-29-2008

Removal failed- Rewiev of file not working

NIS 2008 detected a virus in rar archive.It is a hacktool virus.For resolving this issue the only option provided is review,but when I click on review or apply actions notting happens.
I tested antivurus with EICAR test file packed in zip file format and program immediate respond and remove (delete) file.
Before NIS 2008 I have NIS 2007 and when I was clicked on review,IE is opened and redirects me to Symantec web site and marked issue as solved (reviewed).
So,what is wrong with NIS 2008?
And another thing,vhen computer is come from sleep,notification "You are connected to a trusted network" does not pop up any more.Other notifications works well like blocking intrusion attempt,scanning outgoing messages etc.
Is this bug or something?
Please help
Thanks

OS is Vista Ultimate 32-bit SP1 2G RAM and onboard Realtek network card
huwyngr
Posts: 18,959
Topics: 906
Kudos: 2,329
Solutions: 337
Registered: ‎04-13-2008

Re: Removal failed- Rewiev of file not working

<< NIS 2008 detected a virus in rar archive.It is a hacktool virus. >>

 

You are right to be cautious but are you sure you did not deliberately download a tool with that in it?

 

I ask because I have had a hacktool reported and when I looked to see where it was located it was within a boot disk image downloaded from a reputable site -- bootdisk.com probably.



Hugh
Rootkit Eradicator
Posts: 5,216
Registered: ‎05-30-2008

Re: Removal failed- Rewiev of file not working

Did Auto-Protect Detect this?

 

If not done so already, Update your system via LiveUpdate and then Run a Full System Scan without being Connected to the Internet.

Tuesday, May 14, 2013: The Symantec THREATCON was Changed to Level 2: Elevated Microsoft "Patch Tuesday" | Sunday, May 05, 2013: Microsoft Internet Explorer 8 Zero-Day Vulnerability (Update Released)
Regular Contributor
LazarusLong
Posts: 82
Registered: ‎06-29-2008

Re: Removal failed- Review of file not working

Yes,Auto-Protect detects this issue.Live Update is up to date and I was scan system (full system scan) with internet connection off.(Also I made full system scan with and without Safe mode).

I can delete this file manualy.Norton refuses deleting because "cannot remove file from an unsupportet file format" and this issue is still marked as unresolved.

My question is why when I click on review button and apply actions noting happens?

 As I mentioned in my previous post when I was used NIS 2007 and clicked on review,IE 7 opens,redirects me to Symantec site for review and marked this issue as resolved.

huwyngr
Posts: 18,959
Topics: 906
Kudos: 2,329
Solutions: 337
Registered: ‎04-13-2008

Re: Removal failed- Review of file not working

In my earlier message I referred to 'hacktool" inside a bootable CD image. Actually here is a good read on the topic of false alerts in AV scanners:

 

http://www.ubcd4win.com/faq.htm#false 

 

It was in fact in one of their compilations that the hacktool exists, for valid and not nefarious purposes.

 

Have you checked to see the actual location of the one flagged on your system?



Hugh