AlexB
09-17-2005, 07:54 AM
WHen I switched on my laptop NAV popped up having detected a virus in the following file:
C:/Windows/Temp/mc22.tmp - the virus was Backdoor.Graybird, a high risk keystroke tracker apparently. NAV couldn;t delete the file, as access was denied.
I tried to followed the instructions on the Norton website for removal, starting with CTRL+ALT+DEL for the task manager to close down the process svch0st.exe, but it wasn't running - only a number of similar SVCHOST.EXE applications, which when I closed, caused the PC to come up with 'closing down in 30 seconds'
So I restarted in safe mode, but none of the above file or any of the registry keys or win.ini lines that were highlighted on the Norton instructions were there, and a full scan found no threats.
Restarted normally, and no virus flags.
So, do you think the thing is OK, as there was no reference to the virus on restart (the files, registry keys, win.ini files are all clear as well), and if so, how come NAV flagged up a virus for which there then appeared to be no trace of?
If it's of any importance, when I came to FOFC on restarting this time, I had to relog in, so I assume the cookie had been lost somewhere in the process...
I appear to have said this in a couple of posts recently, but any advice/opinions would be greatly appreciated. Thanks
C:/Windows/Temp/mc22.tmp - the virus was Backdoor.Graybird, a high risk keystroke tracker apparently. NAV couldn;t delete the file, as access was denied.
I tried to followed the instructions on the Norton website for removal, starting with CTRL+ALT+DEL for the task manager to close down the process svch0st.exe, but it wasn't running - only a number of similar SVCHOST.EXE applications, which when I closed, caused the PC to come up with 'closing down in 30 seconds'
So I restarted in safe mode, but none of the above file or any of the registry keys or win.ini lines that were highlighted on the Norton instructions were there, and a full scan found no threats.
Restarted normally, and no virus flags.
So, do you think the thing is OK, as there was no reference to the virus on restart (the files, registry keys, win.ini files are all clear as well), and if so, how come NAV flagged up a virus for which there then appeared to be no trace of?
If it's of any importance, when I came to FOFC on restarting this time, I had to relog in, so I assume the cookie had been lost somewhere in the process...
I appear to have said this in a couple of posts recently, but any advice/opinions would be greatly appreciated. Thanks