Norton Security Suite v 21.0.7.11
Windoze: 8.1 Pro x64
MoBo: Asus Maximum Formula VI
Seeing recurring Block of subject file being detected as Trojan.Gen.SMH.2 as described below. However, the file does not exist in the described location. Instead, there is only a similarly named file pe_file.dll. This raises the following questions.
Questions:
- What are the actions NSS takes to perform a "Block"?
- Given that NSS performed the block first on 20150703 and then again on 20150708, what occurred that the same file had to be blocked again?
Filename: pe_rom.dll
Threat name: Trojan.Gen.SMH.2
Full Path: c:\windows\pe_rom.dll
____________________________
Details
Unknown Community Usage, Unknown Age, Risk High
Origin
Downloaded from
Unknown
Activity
Actions performed: Actions performed: 1
____________________________
On computers as of
7/3/2015 at 4:29:05 PM
Last Used
7/3/2015 at 4:29:05 PM
Startup Item
No
Launched
No
____________________________
Unknown
It is unknown how many users in the Norton Community have used this file.
Unknown
This file release is currently not known.
High
This file risk is high.
Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.
____________________________
Source: External Media
____________________________
File Actions
File: c:\windows\ pe_rom.dll Blocked
____________________________
File Thumbprint - SHA:
c657ffae5283dc61ec540929e21826d1c04701e57f97e32371d21cf0af3aaf0a
File Thumbprint - MD5:
Not available