• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

adware.zangosearch virus...

My norton anti virus detects and deletes two same virus continously a few hundred times a day.  They keep re-appearing in constant non stop circle.

Can anybody help me with this?

The reference viruses are found in the files listed below:

�゚� 蜅 the dl chronicles [DVDRip.DivX].avi

the dl chronicles.mpg

Thx in advance,

Claude

Replies

Kudos0

Re: adware.zangosearch virus...

My norton anti virus detects and deletes two same virus continously a few hundred times a day.  They keep re-appearing in constant non stop circle.

Can anybody help me with this?

The reference viruses are found in the files listed below:

�゚� 蜅 the dl chronicles [DVDRip.DivX].avi

the dl chronicles.mpg

Thx in advance,

Claude

Kudos0

Re: adware.zangosearch virus...

Is NAV indicating anything about the file QTFiles?  If so, you may be running into the issue noted here:

http://community.norton.com/t5/Norton-for-Mac/QTFiles-in-Antivirus-directory/td-p/619101

If following the solution there does not help, let me know and we can investigate further.

Kudos0

Re: adware.zangosearch virus...

Something I forgot to check: are you running NAV for Mac, and if so which version?

If you are running the Windows version, you'll need to ask your question on a different forum.

Kudos0

Re: adware.zangosearch virus...

Thx for the response,

 my version of Norton Sofware 2.2 (16)

 The advisories that  constantly pops out as far is the virus is concerned:

"the dl chronicles.mpg"    and   "�゚� 蜅 the dl chronicles [DVDRip.DivX].avi"  are infected by "adware.zangosearch" deleted.

This many hundred time's a day.

I tried errasing the contaminated AVI  and MPG files but to not avail even though it tells me there errased.

My opersating system is MAC os 10.7.3

Claude

Kudos0

Re: adware.zangosearch virus...

You may need to try deleting them from Terminal, or else something is continually recreating them (to confirm, you don't see any reference to QTFiles?).  Have you tried a full System scan?

Can you find the full path to the files?  You should be able to view it in the History window (Show History from the main page).  Select one of the detections and then do a Get Info from the tools popup (gear at top left of History).

Once you have the full paths, I can tell you how to try manually deleting them.

Kudos0

Re: adware.zangosearch virus...

this is the path

Users/cbell120/.Trash/�゚� 蜅 the dl chronicles [DVDRip.DivX].avi

Kudos0

Re: adware.zangosearch virus...

Try running the Terminal app from /Applications/Utilities, then enter the following command:

sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl chronicles [DVDRip.DivX].avi"

(you'll be prompted for your admin password)

Because of the special characters in the name, I'm not sure this will work.  To see if it was successful, type:

ls -l /Users/cbell120/.Trash

If it is not listed, the file was deleted.  If it's still there, try this command (which will remove any .avi files from your trash):

sudo rm -f /Users/cbell120/.Trash/*.avi

If the problem recurs, some process is re-creating the file, hopefully a System scan can find the source.

Kudos0

Re: adware.zangosearch virus...

This what happen in terminal.

Claude-BELLIVEAU:~ cbell120$
hronicles [DVDRip.DivX].avi" sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl c

WARNING: Improper use of the sudo command could lead to data loss
or the deletion of important system files. Please double-check your
typing when using sudo. Type "man sudo" for more information.

To proceed, enter your password, or type Ctrl-C to abort.

Password:
Sorry, try again.
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
total 1120
-rw-r--r-- 1 root accessibility 572507 1 jui 2009 the dl chronicles.mpg
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.avi
Claude-BELLIVEAU:~ cbell120$

Kudos0

Re: adware.zangosearch virus...

It looks like you also need to delete the .mpg file.  The easiest would be to use:

sudo rm -f /Users/cbell120/.Trash/*.mpg

Then repeat this command to see if anything is left:

ls -l /Users/cbell120/.Trash

Kudos0

Re: adware.zangosearch virus...

How this?

Last login: Sat Feb 11 22:27:30 on ttys001
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
total 176
-rw-r--r-- 1 root accessibility 88478 1 jui 2009 �゚� 蜅 the dl chronicles [DVDRip.DivX].avi
hronicles [DVDRip.DivX].avi" sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl c
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
Claude-BELLIVEAU:~ cbell120$

Kudos0

Re: adware.zangosearch virus...

this is cleaner info

Last login: Sat Feb 11 22:27:30 on ttys001
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm -f "/Users/cbell120/.Trash/�゚� 蜅 the dl chronicles [DVDRip.DivX].avi"
Claude-BELLIVEAU:~ cbell120$ sudo rm -f /Users/cbell120/.Trash/*.mpg
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
Claude-BELLIVEAU:~ cbell120$ ls -l /Users/cbell120/.Trash
Claude-BELLIVEAU:~ cbell120$

Kudos0

Re: adware.zangosearch virus...

OK, thanks, that looks clearer.  For now, at least, there's nothing left in this folder (I still don't know why the NAV repair didn't clean this).  Let me know if you get more alerts, and I would still recommend a System scan from the application, just to be on the safe side.

Kudos0

Re: adware.zangosearch virus...

Ok this evening the computer wil be completly scanned. 

Will let you what happens tomorrow.

CB

Kudos0

Re: adware.zangosearch virus...

Ok the infected files are still re-appearing.

Norton is scaning my whole system.

Will let you when done.

Claude

Kudos0

Re: adware.zangosearch virus...


cbell120 wrote:

Ok the infected files are still re-appearing.

Norton is scaning my whole system.

Will let you when done.

Claude


Claude: Usually these things are kept in your Java Cache folder, so just go there and delete that folder and empty the trash.

/Users/<your_user_name>/Library/Caches/Java

Kudos0

Re: adware.zangosearch virus...

Super Contributor: Did several system search could not find that file So I went to my browser Safari de-activated java script. Virus still come up. Claude
Kudos0

Re: adware.zangosearch virus...

Ok went to JAVA preferences and deleted filed from there. Infected files still exist.
Kudos0

Re: adware.zangosearch virus...

Did the System scan find any?  If so, are they still in your Trash folder?

Kudos0

Re: adware.zangosearch virus...

Norton is still scanning system

Kudos0

Re: adware.zangosearch virus...

problem not resolved.

any help would be appreciated.

files keep getting generated

Kudos0

Re: adware.zangosearch virus...

I will need to look at your log files.  I'll send a private message shortly with instructions.

Kudos0

Re: adware.zangosearch virus...

ok thx

Kudos0

Re: adware.zangosearch virus...

I do see at least a couple detections in QTFiles, amongst a lot of others.  See if this helps at all:

1. Run the Terminal application (from /Applications/Utilities/Terminal)

2. Enter this command:

sudo rm /usr/bin/MigrateQTF

(you will be prompted for your admin password, enter it and hit return)

Are you finding a lot of these repeatedly, or just a couple?

Kudos0

Re: adware.zangosearch virus...

Claude-BELLIVEAU:~ cbell120$
Claude-BELLIVEAU:~ cbell120$ sudo rm /usr/bin/MigrateQTF
Password:
Sorry, try again.
Password:
Claude-BELLIVEAU:~ cbell120$ sudo rm /usr/bin/MigrateQTF
rm: /usr/bin/MigrateQTF: No such file or directory
Claude-BELLIVEAU:~ cbell120$
Claude-BELLIVEAU:~ cbell120$ sudo rm /usr/bin/MigrateQTF
rm: /usr/bin/MigrateQTF: No such file or directory
Claude-BELLIVEAU:~ cbell120$

Kudos0

Re: adware.zangosearch virus...

It looks like it removed the file I am suspicious of.  Let me know if you get more detections now.

Accepted Solution
Kudos0

Re: adware.zangosearch virus...

It appears it worked!

thank you very much!

*****

Claude B.

Kudos0

Re: adware.zangosearch virus...

thank you1

Kudos0

Re: adware.zangosearch virus...

No problem. Sorry I didn't think to have you try that sooner, but it was less obvious in your case what the issue was.  Thanks for your patience.

This thread is closed from further comment. Please visit the forum to start a new thread.