Symantec ActiveX warning

Important information for anyone that has used Symantec's online scan prior to 26th June.

READ HERE

A rescan or tool to remove is necessary.rufsi.dll ActiveX placed for scan.

 

Ouch. Thanks for the heads up on that one.

 

Thanks. I've used Symantec's Security Scan and AV scan in te past.

I just removed "Symantec RuFSI Registry Information Class" ActiveX control from C:\Windows\Downloaded Program Files by right-clicking. (For good measure, I also removed "Symantec Antivirus Scanner ") I would think that should be enough?

I like to play around with the MS-Dos Prompt ...
I didn't find any of the associated files on my system, typing, for example, attrib rufsi.dll /s at C:\windows>. I also created a text file directory listing, using the command, dir /b /s>C:\Alice\DLprogramfiles.txt at the C:\Windows\Downloaded Program Files> prompt.

49 files were found, but none that were listed in theActiveX properties tab for either of the two Symantec ActiveX contols I deleted.

PS. Just to make sure, I also tried
dir /A>C:\Alice\DLprogfiles.txt to get ALL the files, including those with special attributes, and the same 49 files were found.

Anyway I'm satisfied that the ActiveX controls and associated files are gone

 

miniB Thank-you

I had used them and did have the aforementioned Rufs.dll
with the date :rufsi.dll dated prior to June 23, 2003.
I did use there removal tool ,Wish I had keep tract of how many files were there before , it was allot two screen's when viewed from dos prompt afterwords only 22 files and three directories about two thirds of my dos window.
still I didnt know any were hiding in there before this post.Gee.
I'm not surprised by this I should have know to stay away from symantec and norton [things]
But it is nice they did notice and acknowledge it .
June 25, 2003
I wonder where you found the response MiniB ?

Regards
Lonny

 

Alice another good way to find files is the attrib command.

For a test do a search for index.dat in windows. Note what it finds.

then command prompt
cd\

attrib index.dat /s

Mike

 

I already tried that!

...where do you think I got the idea

 

By the way, I also removed my Housecall ActiveX control, based on what I read here:

http://www.securitytracker.com/alerts/2003/Jun/1007029.html

The Housecall ActiveX removal left behind some Directories that contain TrendMicro files, though:
C:\Windows\AUbin and C:\Windows\AUBackup

Wonder if that's all it left behind?

 

Alice good point
Solution Detail: http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionID=15274

no removal tool but all we need to do initiate the process, not do the complete scan again

Lonny

 

Great find on the Housecall Trend Micro article, Lonny, even though it does me no good since I don't plan on reinstalling the Housecal ActiveX control.

I posted it in a new thread