Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: Trojan.Fakeavalert
File: C:\Documents and Settings\Username\Local Settings\Temporary Internet Files\Content.IE5\A05UK5O8\AntiVirusInstaller[1].exe
Action taken: Clean failed : Quarantine failed : Access denied
When navigating to a website I was redirected to a site in internet explorer that was made to look like a fake Windows Security Alert screen. It asked me to download/launch a file. Knowing it was bad news, I closed the download popup, and got the above message from my Symantec corporate edition. So my question is:
Being that I never launched or ran the file, do I need to worry about it? It's there in my temporary internet files, but it doesn't seem to be affecting anything - can I just delete the file and not go through all the steps in the Fakeavalert walkthrough (http://www.symantec.com/security_response/writeup.jsp?docid=2007-101013-3606-99&tabid=3), one step of which says:
"WARNING:
Do not use this tool (UnHookExec.inf) unless:
A Symantec technician or document directs you to do so.
After reading the removal instructions in the writeup, you are sure that the tool is required."
I'm not sure it's necessary, so I don't want to charge ahead and do it. Any thoughts/advice would be really appreciated.
Thanks.