Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.
Can you try scanning with SuperAntiSpyware and Malware Bytes. You can upload the file to Virustotal.com.
Hi
does it tell you the name of the file that the Trojan is embedded in??
Do you know whether the file is in use, by process or any other means, ( the file starts up as soon as you PC is turned on and Windows is loaded).
Backdoor.Trojan, is that all, is the name given more specific??
Regards
Quads
Please can you confirm if you have tried this: http://www.symantec.com/security_response/writeup.jsp?docid=2001-062614-1754-99&tabid=1. Please click on Removal. The reason why I have gave you Page 1 is because it has important information on it that will explain why you keep getting pop-ups regtading why it has been Blocked. :)
Could you also provide:
- Your O.S., S.P..
- Your Norton Product and Version. To get this information: Click "? Help & Support" > About (N.I.S. 2008). You can also get this information via Add/Remove.
It states OS = "Vista - SP1" :-)
Quads
Quads wrote:It states OS = "Vista - SP1" :-)
Quads
Just noticed that; thanks.
Brain is half-asleep!
Hi Heimdall
Can you please advise which Norton Product you are currently using.
You can read about this infection and removal advice following this link provided by Floating_Red. If that doesn't help, try what Dieselman743 suggests and download Malwarebytes', update the definitions and run a full system scan with it. Then do a full system scan with Norton again and let us know the results.
If the infection is still there, can you provide the exact location of the infected file/s.
Thanks
Hi Heimdall,
Based on the "unsupported file" text you saw, the threat is probably in a compressed file.
I am guessing that you have NAV or NIS 2008 or earlier. This text would be shown for compressed file types that supported detection, but not automatic removal.
In NAV/NIS 2009, there is improved handling for compressed files, and normally for a case like this, you would be offered the option to delete the compressed file.
To see which file contains the threat:
1) From a scan: Go to the Attention Required tab and click the name of the threat. That will open the risk properties to the Details tab. You should see the path to the file in a format like this:
[ThreatFile.exe] inside of [CompressedFile.rar]
2) From Security history: Find the threat in Security History in the Unresolved Security Risks view. Click More Details, then click on the link under Risk Details. Switch to the Details tab and look for the file path as mentioned in #1.
Find this file in Windows and delete it manually.
Regards,
Lisa
Screenshot from NAV 2008
My thanks to everyone who responded to my call for help. The Trojan is removed and my computer is now clean. Now all I need to do is go and speak to the 'friend' who sent me the file!!!
Heimdall
PS:
Isn't this forum great!
Glad to hear you are clean of the infection, how did you manage to remove it?
i am new to vista and have this same problem however when i look at the file properties it says "restricted item permission required. I am logged in my pc as the administrator. can someone help me? thanks,
Hi
With Vista even having the account with Administrator rights, still does not give you Full rights, or any part of.
Find the file (or folder) in question, You may have the UAC, popping up and asking now and then.
Right-click the file and select "Properties".
Click on the "Security" tab.
Click "Advanced" in the lower right.
In the "Advanced Security Settings" window that pops up, click on the "Owner" tab.
Click "Edit".
Click "Other users or groups".
Click "Advanced" in the lower left corner.
Click "Find Now".
Scroll through the results and double-click on 'your' current user account.
Click "OK" to all of the remaining windows except the first Properties window.
Select your user account from the list up top and click "Edit".
Select your user account from the list up top again and then in the pane below, check "Full control" under Allow, or as much control as you need.
You’ll get a security warning, click "Yes".
Hope that helps
Quads