Read the thread entitled: trojan.narat
In the News Group: microsoft.public.security.virus
Also, if you post to UseNet with your TRUE, not a munged, email address then you have now
invited
the Swen worm to visit you.
The Swen is news spelled backwards. The reason it is called this is because the Swen worm
harvests email addresses from UseNet News Groups. It has an engine that allows it to post
itself to UseNet News Groups and well as it has its own email engine. From the list of
email addresses that it has harvested, it will then email itself to those addresses.
Dave
| I went to the registry edit as described in the Norton removal
| instructions but when I select the "Run" directory the msnarrator.exe
| file does not come in the right pane as described.
|
| So I'm not sure what I'm doing wrong or if I'm not looking in the
| correct registry file as described in the Norton removal instructions.
|
| Thanks, Mark
|
| > Read the following URL and follow the removal instructions.
| >
| >
http://securityresponse.symantec.com/avcenter/venc/data/trojan.narat.html
| >
| > Dave
| >
| >
| >
| >
| > | > | Anyone know what this is? Is a process listed with PID
| > | 1084 running on my machine. Can't find any info on it on
| > | MS's website. Any help would be appreciated.
