Trojan Galapoper virus when opening IE 6

[Guest]

Periodically (about twice a week) upon opening IE 6, I get a message from
Norton Antivirus 2006 that it has removed Trojan.Galapoper.A from
c:\windows\system32\gbfgayhv.exe. Always the same message, always the same
file name. Is my browser corrupted? If so, how do I fix? So far, Norton
seems to catch this but there may be problems underlying that I dont see.
For reference I also run Webroot Spysweeper. I run a full system scan with
both Norton and Webroot at least once a week and I keep both applications
continually updated with new virus/adware definitions.

 

[Guest]

Periodically (about twice a week) upon opening IE 6, I get a message from
Norton Antivirus 2006 that it has removed Trojan.Galapoper.A from
c:\windows\system32\gbfgayhv.exe. Always the same message, always the same
file name. Is my browser corrupted? If so, how do I fix? So far, Norton
seems to catch this but there may be problems underlying that I dont see.
For reference I also run Webroot Spysweeper. I run a full system scan with
both Norton and Webroot at least once a week and I keep both applications
continually updated with new virus/adware definitions.

Hi Bill,
Delete the File mentioned, Open the Windows Explorer and Localte the Path :
c:\windows\system32\gbfgayhv.exe and Delete the File gbfgayhv.exe but not
the C:\Windows\System32.
You will find the file in the Temp files I think.
Then do a Scan in both mode (Sfae and Norml)
hope this helps
Please let us know
nass

 

[Guest]

The file is not on the computer since Norton intercepted it and quarantined
it. I did find on the Norton site the instruction to disable the XP Recovery
feature, then run a scan. I did that and no problems were detected. I am
still trying to find out why I get this virus attempt when I access Google
using IE.

 

[Guest]

The file is not on the computer since Norton intercepted it and quarantined
it. I did find on the Norton site the instruction to disable the XP Recovery
feature, then run a scan. I did that and no problems were detected. I am
still trying to find out why I get this virus attempt when I access Google
using IE.

Open the Quarentine Files on Norton and you will be given the Choice to
Delete or Keep the File Quarentine.
If no Joy Try to send Norton the Sample if they have such option and ask
them about this behavior.
Try another Scan such http://www.pandasoftware.com/products/activescan.htm
and see the report from the scan, also Scan for Malware.
Malware can cause this issue for malware and worm remover try this:
http://www.avast.com/
hope this helps
nass