Norton AV finds then denies existence of viruses

[Ronald Smyth]

Norton av (2002) alert: Yesterday after running a full scan it showed I
had five trojan.byte.verify viruses. When I tried to clean them it could
only erase two. 3 refused to be removed or quarantined.
Then I got latest definitions (8-20-04) and ran full scan again. This
time it showed 4 trojan byte viruses and I was able to quarantine only
1. I ran a full scan again this time it showed NO VIRUSES.
Neither did my secondary program AVG.

But I then went in and saw that two of those infected files were still
in there but with an idx instead of zip extension. I then manually
deleted them.
I also noticed that one of the files(or folders) Norton reports
'C:\Documents and Settings\Ronald\JPI_CA~1' doesn't exist on my PC
altogether. The .jpi_cache folder is there. I have hidden files revealed
in my settings.
I have Windows XP. I have all Microsoft critical updates installed
before this incident(with the exception of the controversial SP2
update). Why would Norton tell me there are no viruses when it just told
me I have several unremovable ones?

Norton AV report:
------
Date: 8/24/2004, Time: 23:21:24, Ronald on xxxxxxxx
Virus scan started.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
The compressed file Dummy.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\classload.jar-10ffa0b5-33193c73.zip is
infected with the Trojan.ByteVerify virus.
The file was quarantined.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
The file C:\Documents and
Settings\Ronald\.jpi_cache\jar\1.0\counter.jar-5a966237-3fdb9d30.zip is
infected with the Trojan.ByteVerify virus.The file was quarantined.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
The compressed file counter.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\counter.jar-5a966237-3fdb9d30.zip is
infected with the Trojan.ByteVerify virus.
The file was quarantined.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
The compressed file VerifierBug.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\counter.jar-5a966237-3fdb9d30.zip is
infected with the Trojan.ByteVerify virus.
Unable to delete the file.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
The compressed file Dummy.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\counter.jar-5a966237-3fdb9d30.zip is
infected with the Trojan.ByteVerify virus.
Unable to delete the file.

Date: 8/24/2004, Time: 23:56:10, Ronald on xxxxxxxx
Virus scanning completed.
Master boot records:
Scanned: 1
Infected: 0
Repaired: 0
Boot records:
Scanned: 1
Infected: 0
Repaired: 0
Files:
Scanned: 111764
Infected: 5
Repaired: 0
Quar'ed: 3
Deleted: 0

Date: 8/25/2004, Time: 0:01:40, Ronald on xxxxxxxx
Virus scan started.

Date: 8/25/2004, Time: 0:46:26, Ronald on xxxxxxxx
Virus scan started.

Date: 8/25/2004, Time: 0:46:26, Ronald on xxxxxxxx
Virus scanning completed.
Master boot records:
Scanned: 0
Infected: 0
Repaired: 0
Boot records:
Scanned: 0
Infected: 0
Repaired: 0
Files:
Scanned: 2
Infected: 0
Repaired: 0
Quar'ed: 0
Deleted: 0

Date: 8/25/2004, Time: 0:46:46, Ronald on xxxxxxxx
Virus scan started.

Date: 8/25/2004, Time: 0:46:46, Ronald on xxxxxxxx
Virus scanning completed.
Master boot records:
Scanned: 0
Infected: 0
Repaired: 0
Boot records:
Scanned: 0
Infected: 0
Repaired: 0
Files:
Scanned: 2
Infected: 0
Repaired: 0
Quar'ed: 0
Deleted: 0

Date: 8/25/2004, Time: 0:49:24, Ronald on xxxxxxxx
The file C:\Documents and
Settings\Ronald\.jpi_cache\jar\1.0\classload.jar-10ffa0b5-33193c73.zip
is infected with the Trojan.ByteVerify virus.
The file was quarantined.

Date: 8/25/2004, Time: 0:49:24, Ronald on xxxxxxxx
The compressed file GetAccess.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\classload.jar-10ffa0b5-33193c73.zip is
infected with the Trojan.ByteVerify virus.
Unable to delete the file.

Date: 8/25/2004, Time: 0:49:24, Ronald on xxxxxxxx
The compressed file InsecureClassLoader.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\classload.jar-10ffa0b5-33193c73.zip is
infected with the Trojan.ByteVerify virus.
Unable to delete the file.

Date: 8/25/2004, Time: 0:49:24, Ronald on xxxxxxxx
The compressed file Installer.class within C:\Documents and
Settings\Ronald\JPI_CA~1\jar\1.0\classload.jar-10ffa0b5-33193c73.zip is
infected with the Trojan.ByteVerify virus.
Unable to delete the file.

Date: 8/25/2004, Time: 0:49:24, Ronald on xxxxxxxx
Virus scanning completed.
Master boot records:
Scanned: 1
Infected: 0
Repaired: 0
Boot records:
Scanned: 1
Infected: 0
Repaired: 0
Files:
Scanned: 111764
Infected: 4
Repaired: 0
Quar'ed: 1
Deleted: 0

Date: 8/25/2004, Time: 0:57:06, Ronald on xxxxxxxx
Virus scan started.

Date: 8/25/2004, Time: 1:03:40, Ronald on xxxxxxxx
Virus scan canceled.

 

[Udo Kammer]

Norton av (2002)

NAV 2002 ??? What OS your are using?

I am using XP Home SP2 and just running NAV 2004 and ordered the
Update to NAV 2005. I won't set out the risk, that an old NAV won't
find a virus,

Udo Kammer

 

[Ronald Smyth]

As I wrote in my original post, I am running Windows XP. I have the latest
AV definitions 8-25-04. I haven't been told by anyone or read anywhere that
Norton 2002 is no longer effective even with updated definitions. If I am
wrong I would like to know.

 

[Wattsville Blues]

Norton av (2002) alert: Yesterday after running a full scan

I'll stop you there. I used Norton 2002 for a about 2 years and I can't
count the number of times it told me I had a virus but couldn't do anything
about it. Changed over to Symantec Enterprise Edition 9 thinking a more
recent engine etc would help me, but turned out to be as useless as Norton.

My advice, try NOD32 or McAfee Enterprise.

 

[kurt wismer]

As I wrote in my original post, I am running Windows XP. I have the latest
AV definitions 8-25-04. I haven't been told by anyone or read anywhere that
Norton 2002 is no longer effective even with updated definitions. If I am
wrong I would like to know.

you are wrong....

it's not just virus definition databases that improve over time, the
underlying scanning technology does as well, and the newer defs will
require the newer technology in order to be effective...

 

[Buffalo]

As I wrote in my original post, I am running Windows XP. I have the latest
AV definitions 8-25-04. I haven't been told by anyone or read anywhere that
Norton 2002 is no longer effective even with updated definitions. If I am
wrong I would like to know.

Get the latest virus defs and install them(Intelligent Updater),
disconnect from the Internet, disable System Restore, run the Norton
Virus Scan again.
When you're satisified that your system is 'clean' reboot and 'enable'
System Restore again.