Every couple of minutes I keep getting a Norton Popup that informs me that Auto-protect has blocked a security risk Trojan.ADH.2...Is this a repeating attack??? How do I find what's causing it??? Very annoying. Any ideas??
Hi oldsojer
i guess i should welcome you to the Norton Community Forum where information, questions and answers are always available from the users and Symantec Employees and the Gurus of course.
I found this detailed info on the paticular Trojan it is from a Norton Symantec website. Follow this link
http://www.symantec.com/security_response/writeup.jsp?docid=2011-030906-0727-99
One of the other users might have more info on why you keep getting pop ups for a low risk detection or maybe a Symantec Employee might be able to assist.
Cheers
Hi oldsojer:
TheBluesBrother has posted a solution here that suggests that running the free Malwarbytes Anti-Malware (MBAM) is the simplest way to remove this malware. I have MBAM on my system as well and use it to run an on-demand full system scan every week or so just to be extra safe.
---------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 7.0.1
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
Hi oldsojer
In the link in my previous reply are some steps that can be taken to remove the risk, they include a full scan and if not successful you can try Norton Power Eraser.
Hope that helps.
Cheers
Trojan.ADH.2 is a generic detection. As such it can identify legitimate files that are doing something it finds suspicious. Please look in History for any detection and then click on more details to see if the file name and path is listed.
OK, thanks to all. I downloaded Malwarbytes and ran a full scan...problem seems to be solved!!!
Hi oldsojer:
Glad to hear MBAM solved the problem, but it might not hurt to check your security history as delphinium suggested (start with History | Recent History or History | Computer Protection | Sonar Activity) to see what caused the problem in the first place. You might just end up re-downloading the same file again and re-creating the issue, so it would be nice to know the original source of the problem.
The scan log in the Logs tab of your MBAM software should show the file name but I can't recall if it will show the full path to the suspicious file.
-----------
Windows Vista Home Premium 32-bit SP2 * NIS 2011 v. 18.6.0.29 * IE 9.0 * Firefox 7.0.1
HP Pavilion dv6835ca, Intel Core2Duo CPU T5550 @ 1.83 GHz, 3.0 GB RAM, NVIDIA GeForce 8400M GS
Apparently I picked the Trojan from adware when doing a Search. Affectred files were deleted. Thanks for your help!