I received an alert from NAV that it had blocked W32.Hitapop from running. I checked my Security Risk Log and found that NAV had blocked it today and on 01/03/09. Here is part of the Log:
Action Taken: Blocked
Affected Areas:
c\documents and settings\Mike\local settings\temp\jgl_rt\jshap or.dll
c\documents and settings\Mike\local settings\temp\jgl_rtl_rt1\jshap or.dll
The problem is I can't find those files or folders (I have Windows Explorer set to show Hidden and System Files). I don't see them in that Temp file. I also ran NAV on just that Temp folder and NAV said it was clean! How can that be when it just told me that it had blocked the trojan from running and that it was at that location?
Can anyone tell me how to check to see if this trojan is stil on my computer and if it is, how to get rid of it. (I've read the Symantec article on W32.Hitahop but it doesn't seem to apply since NAV originally said it blocked it from running but now can't find it.. Thank you. Mike