Two trojans in one hour? normal?

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Hi

 

Just that one file?? No More, like an .exe file.

 

 

Quads 

that was the only file

Hi

 

I do not have  "fm2032.dll" as a file  on my Win XP Sp3 system,  I also did a web search and found nothing.  I have not seen a file of that name before.

 

If it is kept in Quarentine it will do no harm,

 

If you have just recently installed 2009, (like the last few days) it could be that you have had the Trojan in it's intireity previously, that had been partially remove to the point that it didn't do any more damage or activity. NIS 2009 with updated definitions had detected more files belonging to that Trojan in question.  The next time NIS has an update of definitions it may well find one or two more files or registry entries again. Or maybe not.

 

That is also why the definitions keep getting updated, 1. to add for New viruses etc.   2. To add detections for existing nasties that some files my not have been known then the defs. where first released.   Of course there are always new variations also.

 

Did Norton tell you the name given to the infection??  Like Win32.Trojan. downloader................................

 

Thanks

 

Quads 

The best thing you can do submit the file to Symantec so they can have a look at it.

Malware Submission

Please have a look at the link I posted 

it said 3 errors.....2 were reg entries and the 3rd was that file I posted....very weird

So you weren't able to submit anything?

Are you able to PM me the errors? Screenshot will help

ok, just got another error, bottom right hand corner said TROJAN horse detected then 2 minutes later it says TROJAN Removed system now safe......I go into quarantine section and this is show..............is it just me or isnt it supposed to say more than just Trojan horse?

 

 

 

 

[edit: changed link to inline photo.]

 

 

Message Edited by Allen_K on 09-25-2008 09:46 PM

airtas wrote:

ok, just got another error,  bottom right hand corner said TROJAN horse detected then 2 minutes later it says TROJAN Removed system now safe......I go into quarantine section and this is show..............is it just me or isnt it supposed to say more than just Trojan horse?

 

 

http://s13.photobucket.com/albums/a260/irishskills01/?action=view&current=TJ.jpg


 

 

See this Web Link: http://www.symantec.com/security_response/writeup.jsp?docid=2004-021914-2822-99

Do you see on the screenshot in the lower left where it says View:   Risk Details.  Click on that.

1 Like

why  does it say HIGH risk but when you click link it says low risk

 

 

isnt Trojan a type of virus?  why does it not have a specific name?

Could ou post a screenshot?

Looks like the firewall blocked a trojan horse from accessing your files.

what happens to that file listed in the quarantine? is that an important windows file?

I dont think its a false positive. Just play around with your computer: surf the web, browse files. If everything is fine, then let the quarientined file be. Otherwise you can restore. And yes, you can get viruses on your computer when connected to the web, wheter you use the internet or not. The cable just has to be plugged in.

I deleted the quarantined file, should I have restored it?


airtas wrote:
I deleted the quarantined file, should I have restored it?

 

No, because it would have Re-stored the Risk.

does NIS 2009 not have a repair function?

 

 

Is the file that it removed a windows file that is needed by windows?

I think, Airtas, you may be misunderstanding "repair."  Once a file has been corrupted by a virus, it can't really be repaired; because Norton has no way of knowing what the original looked like.  That kind of repair by replacement would be an entirely different world of activity and might be suitable to an entirely different product.

 

It is your system that has been "repaired" in terms of removing the damaging virus, but the damage that has been done has not, for the most part, been repaired.