Trojan.Narat (msnarrator.exe) & Internet Explorer

[PickleBoy]

I am running Windows XP, Norton Antivirus 2004 and Internet
Explorer 6.0 (SP1). My computer was infected with the
Trojan.Narat virus. I installed Norton Antivirus and it
removed the virus for me. However, every time I open the
Internet Explorer browser the viral "msnarrator.exe" file
tries to get loaded back onto my system. Norton catches it
and informs me that it deleted it...but, this is happening
every time I go to a new web page via a link, new URL,
etc... I also have Netscape 7.1 installed and it does not
have this problem. Somehow this virus has altered Internet
Explorer and I'm not sure where to go to restore it back to
it's normal state. I have tried uninstalling and
re-installing Internet Explorer and this did not help. I
have also searched for (and removed) all references to
"msnarrator.exe" in the registry. Let me know if you have
any information that can help me...

 

[PA Bear]

See
http://securityresponse.symantec.com/avcenter/venc/data/trojan.narat.html.
Definitions dated 31 Dec-03 should catch everything.

Also try rebooting into Safe Mode and scanning with NAV with nothing else
open.
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

Protect Your PC
http://www.microsoft.com/security/protect/