I found every directory of my C drive is infected with a Trojan Horse called "arun.exe". Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file. I scanned the entire drive and it never once showed up. I checked the virus definitions on the Symantec website; it is not listed. Webroot Spysweep did not pick it up, nor did NoAdware. Anybody have any idea what it does and how to remove it?
Norton AntiVirus pops up with a High Risk Virus Alert, telling me it was unable to repair this file.
This doesn't appear to be a mallicious app. Keep in mind that AV's use heuristics as well as signiture definitions which may lead to false positives.
What folder is arun.exe in? Where is it? Bring up the drive/partition, under Tools > folder options > view tab, make sure the hide options are unchecked.
Regards - Charles
Last edited by charlesvar; 20th May 2005 at 16:36.
Thanks for your response. It certainly acted like a malicious intruder. NAV kept popping up with warnings which I was unable to close. The file was in the C root and in every C directory. I was unable to delete, got the message: disc full or access denied .... I finally went into Safe Mode on a search and destroy mission and was able to delete every instance, also the Registry entry. Hope this the end of it!
The reason Norton can't repair it, as the file itself is the entire thing. A Repair would mean a normal file had viral code inserted into it, and Norton would attempt to remove the viral code.
Why not have Norton quarantine it?
Or go to RAV Online Scan for a second opinion for free?
Sorry, I did not make myself clear. NAV 2005 did not pick it up when I scanned the drive and therefore could not quarantine it. It just kept popping up with the virus alert windows. So I am not sure why it did not pick it up on a scan. My virus definitions were up to date. Anyway, the problem is solved. Thanks.