Just had a strange experience re: a virus.

bobmc32 · 3rd April 2003

Just had a strange experience re: a virus. It was picked up while using Crazy Browser and posting to a board. Norton flashed up a virus warning:
D:\Program Files\CrazyBrowser\CrazyBrowser.exe
Infected with w32Frethem.Gen@mm

Ran the recommendations from Norton but it could not repair, quarantine, nor delete. I finally got rid of everything via Ctl+alt+del and ran the recently updated Norton A/V and it picked it up. Ran the recommendations and it did manage to quarantine. It buggered up my Crazy Browser but that's all I've seen so far. This is almost a year old threat and I had updates as of today. Wonder what happened?
Also ran Housecall and it gave a clean report.

Daizy · 3rd April 2003

You had no luck with the fixtool then?

Daizy

bobmc32 · 3rd April 2003

Hmm, no Daizy, I didn't try fixtool as when I ran Norton A/V it picked it up and did manage to quarantine so I didn't think it necessary. This is maybe not so? I still have some things a little buggered up - not big things, just aggravating. If I run the Fixtool it should "fix" things up?

Ok, I just ran the fixtool. It did it's do and ran thru all my files but found no aforementioned virus, therefore didn't do anything so it seems. I still have some buggered things here, like favorites will not bring up Windows BB and such. Crazy Browser is still a mess (non working.) ??

mr.mark · 3rd April 2003

Quote:

You had no luck with the fixtool then?

only thing i would add is to send the infected user to the actual symantec removal tool page.

the symantec page appears to have been updated about two months ago, whereas the rnsonline page is six months older than that. might make a diff.

bob is strongly encouraged to run the removal tool.

daizy is strongly encouraged to lodge any complaints about invisibility with me via pm where they will be handled with utmost care.

mark

bobmc32 · 3rd April 2003

Was pointed (on another board) to a recent Usenet thread whereas a number of folks have had/are having the same strange behaviors. Apparently a False positive in Norton caused by the latest update to virus difinitions which came out yesterday. I don't know how to undo the latest virus update but do have GoBack with plenty of history so think I'll GoBack to before the d/l of latest Norton update.

mr.mark · 3rd April 2003

Quote:

I don't know how to undo the latest virus update

i found this (posted last night)....

"It is a false positive. Response knows about it, and will have a liveupdate available shortly to address it. I apologize on behalf of Symantec for the inconvenience.
--
Brendon Woirhaye
Sr. SQA Engineering Manager
Client Security Technologies
Symantec Corporation"

bobmc32 · 3rd April 2003

Thanks Mr. Mark. I'll check the new update shortly. I had sent the suspect to Symantec and their automated replies made no mention of that.
Later: I ran the Norton updated and fixed update re: the false positive and the browser seems normal now altho I do have one or two other small things still awry. (Can't open a hyperlink in OE for instance)

bobmc32 · 4th April 2003

Ok, I finally invoked GoBack and went back to start of day yesterday because I was still having problems like not able to open hyper links in OE and file associations buggered up somewhat so did the do and all seems well now. I luv GoBack!