Trojan.SpamThru: What's wrong with my Nortan AntiVirus?

I

iwannafly

Almost every one minute, Norton Symantec AntiVirus Corporate Edition
pops up an auto-protection window:

saying that it found a Trojan.SpamThru.... and deleted it...

http://img237.imageshack.us/img237/3390/gggxr6.jpg


But these messages seem no ending... and the windows keep popping
up...

I searched everyone and didn't find symptoms such as the trojan
modifies the hosts file, etc.

And the location of this risk is very strange, it is located under the
Symantec folder itself, as shown below:

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec
AntiVirus Corporate Edition\7.5\APTemp\

What's wrong with my computer? Is there really a virus? Or it is just
the Nortan Antivius has something wrong?

Thanks
 
D

David W. Hodgins

I said the symptoms are not correct. It does not look like a
SpamThru.
For one thing, the hosts file did not get modified at all.

Do you have something like spybot locking the hosts file?

Regards, Dave Hodgins
 
I

iwannafly

Do you have something like spybot locking the hosts file?

Regards, Dave Hodgins

No. I don't have spybot.
This is a new laptop freshly arrived on Friday.

All I have are Norton and TrendMicro's Internet Security, running
together.
 
J

jen

iwannafly said:
Almost every one minute, Norton Symantec AntiVirus Corporate Edition
pops up an auto-protection window:
saying that it found a Trojan.SpamThru.... and deleted it...
http://img237.imageshack.us/img237/3390/gggxr6.jpg
But these messages seem no ending... and the windows keep popping
up...
I searched everyone and didn't find symptoms such as the trojan
modifies the hosts file, etc.
And the location of this risk is very strange, it is located under the
Symantec folder itself, as shown below:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec
AntiVirus Corporate Edition\7.5\APTemp\
What's wrong with my computer? Is there really a virus? Or it is just
the Nortan Antivius has something wrong?

Trojan.SpamThru is a Trojan horse that can be used to send unsolicited
email through the compromised computer:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-111716-3107-99

-jen
 
J

jen

iwannafly said:
No. I don't have spybot.
This is a new laptop freshly arrived on Friday.
All I have are Norton and TrendMicro's Internet Security, running
together.

You can't run two AV's together... That's most likely your problem.
Also, follow up on all the cleanup instructions on the Symantec site.

-jen
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top