Hi everyone,
I have NIS 2010 17.2 on Win 7 32bit pc Italian version, full updated with live update.
Today after I runned an setup.exe I find these files:
c:\Program Files\flash\flash.exe
C:\Users\Alessandro\AppData\Local\Temp\uuu.uuu
C:\Users\Alessandro\AppData\Local\Temp\xxx.xxx
C:\Users\Alessandro\AppData\Roaming\logs.dat
and this registry entry:
Windows Registry Editor Version 5.00 [HKEY_USERS\S-1-5-21-3240240128-1729024375-1018876908-1000\Software\noobs] “FirstExecution”=hex(2):31,00,33,00,2f,00,30,00,37,00,2f,00,32,00,30,00,31,00,\ 30,00,20,00,2d,00,2d,00,20,00,31,00,37,00,3a,00,34,00,33,00,00,00 “NewIdentification”=hex(2):6e,00,6f,00,6f,00,62,00,73,00,00,00
It’s clear that these are viruses files (google and malwareantibytes sustain that) Norton doesn’t find any viruses. In panic moment I have deleted manually these files but I can write the link that contain the virus.
Is a setup.exe that is included on a rar file that a friend ask me to test with Norton and I have discovered that is a torrent file.
I was stupid at try this file and trust my friend but is it possible that Norton can examine this file if I write the link?
Thank in advance for replies.