Inactive [InActive] FauxVirus ?

As I was watching my MS Defender going through a quick scan (I have a boring life LOL) I noticed the term 'fauxvirus' come up, I think it was in the C drive. From what I can gather this may be a keylogger maybe? I can't understand why a full Norton scan didn't spot this & take any action. I make sure I am up to date with all the Synmantec upgrades. I have installed 'Spybot' & as I type this it is doing a full scan. Does anyone know what's going on with this 'fauxvirus'? Should I be worried?

 

Hi Davezilla,

You mention seeing the term during the scan, but did the scan results show any sign of infection?

 

No, mate. Both Norton, MS Defender & SUPERAntiSpy don't see it as a threat. I was just curios. I don't actually download that much, I have used a couple of mirrors recently & I will normally download in Firefox 3 anyway (it virus scans any downloads). I was just being on the safe side. Since I have scanned with SUPERAntiSpy (I uninstalled Spybot) I have not seen it since. I have been googling a bit however & it could just turn out to be one of those fake viruses. This could be why Norton doesn't take it seriously.

"DEFINITION OF: CARNY_RIDE.EXE
Safety Rating: Known Malware, do not run
Malware Family: Part of Malware group - Rootkit Haxdoor
Malware Form: EXPLOIT"

A friend of mine from Norway sent me this definition. This is maybe what I saw, although I only really remember the fauxvirus thing.

It may be nothing. I just did an MS Defender scan & didn't see anything. It could be that SUPERAntiSpy wasted it.

It may be nothing. The way things are going I am going to end up with more anti-spy capabilities than MI6

 

CARNY_RIDE.EXE

Do you have that file?
Did you have that file?
Do any of your scan logs show that file as removed?

 

I am not sure, I can't find it. I only think that this was the file. Like I said, I only really remember the 'fauxvirus' name.

 

Well, you can always do a scan with Kaspersky Online Scanner if it would make you feel more comfortable.

 

Scan City

I have scanned with Yahoo-online, SUPERAntiSpyare, Norton, & MS Defender. I am running another scan now. Maybe I will get around to that.

There is one thing that is bothering me though. Norton Security Online tells me that it is working. But when I wanted to view the online virus encyclopaedia, it informs me with a pop-up that Norton Security Online cannot find a component. Uninstall & Reinstall Norton Security Online.

I really don't want to go through the rigmarole of doing that. Could it be that I have removed some cookies that had something to do with this with SUPERAntiSpyware?

 

I wouldn't hold SAS responsible, though it's not an impossibilty. Try doing a Live Update then reboot and try again.

 

OK I will try that. I tried it about 10 mins ago, with no success.

 

My only other suggestions are;

1. Uninstall/Re-install
2. Contact Symantec support

Sorry

What was the outcome of the Kaspersky scan?

 

I have uninstalled & reinstalled Norton (with the help of BT Yahoo) & I still get the pop-up. The BT Yahoo Tecs said that my AV software is running fine & that I shouldn't worry about it (in other words they don't know). I have mentioned this on the Norton Users Discussion Forum & the problem has been flagged & passed on to be looked at. I can contact BT Yahoo quite easily without using the Norton interface & I can see the virus encyclopaedia online at the Symantec site (as can anybody) so I haven't really lost anything. I had a look at the Kaspersky scan & I am not too sure about using it. I am not sure I can 'unable' or switch off Norton. I can't think that it can be any better than all the other scans I have been doing.

I have downloaded this however & the freebie version has given me a clean bill of health. It looks quite capable (mind you; they all do) & this only takes about 650 KB of my drive.

http://spywarefiles.prevx.com/spywarefiles.asp?FXC=HFCI10495894

 

My Bad ... !

I think when I saw the FAUXVIRUS originally I was looking at the Norton scanner & not Defender. I am sorry for this mistake (my bad ). The Symantec blokes seem to think it could be just a Norton thing & the file coming up like it does (seemingly not rare for Norton users) is just Norton checking for a virus or spyware & is not necessarily indicative of actually having the infection.

 

Glad you got to the bottom of it. Did Symantec support manage to help get things working properly again?

Think I'll mark this topic now too, since it appears to be a non-issue.

 

Not everything ...

Well, I think the whole FAUXVIRUS thing has been explained & I am not infected with anything ! The problem with the pop-ups is being looked into. The BT Yahoo guys didn't think there was anything wrong with my computer & Norton was running fine. So I am OK . I can't think why I get the pop ups. The problem is probably not with my computer.