Norton "Cannot Repair"

[Shoogle]

I keep getting a pop-up box from Norton AV that says 'CANNOT REPAIR' and
suggests a quarantine, which I accept. These files are always listed as
'43578.exe' or some numbered .exe file.
My system is the old Win98 one and I have done a coouple of things: one of
them is to run a 'Clean Up' program and also to remove all of the
nnnnn.exe files from Windows\temp. Does anyone know where these files
could come from that NOrton doesn't like?
Thanks in advance. Ken J.

 

[kurt wismer]

I keep getting a pop-up box from Norton AV that says 'CANNOT REPAIR' and
suggests a quarantine, which I accept. These files are always listed as
'43578.exe' or some numbered .exe file.
My system is the old Win98 one and I have done a coouple of things: one of
them is to run a 'Clean Up' program and also to remove all of the
nnnnn.exe files from Windows\temp. Does anyone know where these files
could come from that NOrton doesn't like?

it's pretty much impossible for us to tell you where randomly named
executables are coming from... filemon (from
http://www.sysinternals.com) with appropriate filtering might be able to
help you track down what process is creating those files, however... i'd
suggest using the directory name where the files are showing up as an
'include' filter...

 

[David H. Lipman]

From: "Shoogle" <[email protected]>

| I keep getting a pop-up box from Norton AV that says 'CANNOT REPAIR' and
| suggests a quarantine, which I accept. These files are always listed as
| '43578.exe' or some numbered .exe file.
| My system is the old Win98 one and I have done a coouple of things: one of
| them is to run a 'Clean Up' program and also to remove all of the
| nnnnn.exe files from Windows\temp. Does anyone know where these files
| could come from that NOrton doesn't like?
| Thanks in advance. Ken J.

Please submit the quarantined '43578.exe' to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.

 

[Virus Guy]

| These files are always listed as '43578.exe' or some
| numbered .exe file.

Please submit the quarantined '43578.exe' to Virus Total
http://www.virustotal.com/flash/index_en.html

Might want to submit it here as well:

http://www.kaspersky.com/scanforvirus