Norton internet security 2007. win xp home sp2. in the history section under
unresolved secrity risks. I have an entry for bifrose backdoor trojan. and
says removal failed. when I do a complete scan nothing comes up as a virus. I
checked the removal tools section at norton site. and the registry keys it
mentions for bifrose are not present in my registry. I went to tech support
on the norton site and I got to a chat session. the pleasant man with a
foreign name said "I can give you a link that will take you to tech support"
first I thought I was already at tech support but I clicked on the link that
took me to the same page that brought me to him is the first place. which is
completly retarded.

any ideas on this?

Greg

"Starvoyager" wrote:

> Norton internet security 2007. win xp home sp2. in the history section under
> unresolved secrity risks. I have an entry for bifrose backdoor trojan. and
> says removal failed. when I do a complete scan nothing comes up as a virus. I
> checked the removal tools section at norton site. and the registry keys it
> mentions for bifrose are not present in my registry. I went to tech support
> on the norton site and I got to a chat session. the pleasant man with a
> foreign name said "I can give you a link that will take you to tech support"
> first I thought I was already at tech support but I clicked on the link that
> took me to the same page that brought me to him is the first place. which is
> completly retarded.
>
> any ideas on this?
>
> Greg


Scan for malwares from here:
http://www.lavasoft.com/products/ad-...e_personal.php
http://www.safer-networking.org ; for Spybot S&D

Removing Trojans
http://www.sophos.com/support/disinfection/trojan.html

[-]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run= Remove
this entry if it there "StartKey" = "%WinSysDir%\rtfmsv.exe"

C:\Windows\System32\system.exe" <= Remove this process
C:\Windows\system.exe" <=Remove this process

It may be the Norton did quarantine it in the Fault Virus chest and you
need to access the Norton to remove it or tell it you want to remove it.
HTH.
nass
----
www.nasstec.co.uk