Reply
Contributor
cbell120
Posts: 16
Registered: ‎02-11-2012
Accepted Solution

adware.zangosearch virus...

My norton anti virus detects and deletes two same virus continously a few hundred times a day.  They keep re-appearing in constant non stop circle.

Can anybody help me with this?

The reference viruses are found in the files listed below:

 

�゚� 蜅 the dl chronicles [DVDRip.DivX].avi

 

the dl chronicles.mpg

 

Thx in advance,

 

Claude

Symantec Employee
Lee_G
Posts: 849
Registered: ‎11-23-2009

Re: adware.zangosearch virus...

Is NAV indicating anything about the file QTFiles?  If so, you may be running into the issue noted here:

 

http://community.norton.com/t5/Norton-for-Mac/QTFiles-in-Antivirus-directory/td-p/619101

 

If following the solution there does not help, let me know and we can investigate further.

Symantec Employee
Lee_G
Posts: 849
Registered: ‎11-23-2009

Re: adware.zangosearch virus...

Something I forgot to check: are you running NAV for Mac, and if so which version?

 

If you are running the Windows version, you'll need to ask your question on a different forum.

Contributor
cbell120
Posts: 16
Registered: ‎02-11-2012

Re: adware.zangosearch virus...

Thx for the response,

 

 my version of Norton Sofware 2.2 (16)

 

 The advisories that  constantly pops out as far is the virus is concerned:

 

"the dl chronicles.mpg"    and   "�゚� 蜅 the dl chronicles [DVDRip.DivX].avi"  are infected by "adware.zangosearch" deleted.

 

This many hundred time's a day.

 

I tried errasing the contaminated AVI  and MPG files but to not avail even though it tells me there errased.

 

My opersating system is MAC os 10.7.3

 

Claude

 

 

Symantec Employee
Lee_G
Posts: 849
Registered: ‎11-23-2009

Re: adware.zangosearch virus...

You may need to try deleting them from Terminal, or else something is continually recreating them (to confirm, you don't see any reference to QTFiles?).  Have you tried a full System scan?

 

Can you find the full path to the files?  You should be able to view it in the History window (Show History from the main page).  Select one of the detections and then do a Get Info from the tools popup (gear at top left of History).

 

Once you have the full paths, I can tell you how to try manually deleting them.

Contributor
cbell120
Posts: 16
Registered: ‎02-11-2012

Re: adware.zangosearch virus...

this is the path

 

Users/cbell120/.Trash/�゚� 蜅 the dl chronicles [DVDRip.DivX].avi

Symantec Employee
Lee_G
Posts: 849
Registered: ‎11-23-2009

Re: adware.zangosearch virus...

Try running the Terminal app from /Applications/Utilities, then enter the following command:

 

sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl chronicles [DVDRip.DivX].avi"

 

(you'll be prompted for your admin password)

 

Because of the special characters in the name, I'm not sure this will work.  To see if it was successful, type:

 

ls -l /Users/cbell120/.Trash

 

If it is not listed, the file was deleted.  If it's still there, try this command (which will remove any .avi files from your trash):

 

sudo rm -f /Users/cbell120/.Trash/*.avi

 

If the problem recurs, some process is re-creating the file, hopefully a System scan can find the source.

Contributor
cbell120
Posts: 16
Registered: ‎02-11-2012

Re: adware.zangosearch virus...

This what happen in terminal.

 

Claude-BELLIVEAU:~ cbell120$
hronicles [DVDRip.DivX].avi" sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl c

WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.

To proceed, enter your password, or type Ctrl-C to abort.

Password:
Sorry, try again.
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
total 1120
-rw-r--r-- 1 root accessibility 572507 1 jui 2009 the dl chronicles.mpg
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$

Symantec Employee
Lee_G
Posts: 849
Registered: ‎11-23-2009

Re: adware.zangosearch virus...

It looks like you also need to delete the .mpg file.  The easiest would be to use:

 

sudo rm -f /Users/cbell120/.Trash/*.mpg

 

Then repeat this command to see if anything is left:

 

ls -l /Users/cbell120/.Trash

 

Contributor
cbell120
Posts: 16
Registered: ‎02-11-2012

Re: adware.zangosearch virus...

How this?

 

Last login: Sat Feb 11 22:27:30 on ttys001
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
total 176
-rw-r--r-- 1 root accessibility 88478 1 jui 2009 �゚� 蜅 the dl chronicles [DVDRip.DivX].avi
hronicles [DVDRip.DivX].avi" sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl c
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
Claude-BELLIVEAU:~ cbell120$