notepad.exe

  • Thread starter Thread starter Dick M.
  • Start date Start date
D

Dick M.

Norton found a Trojan horse in the file
c:\windows\system32\notepad.exe.
Norton could not repair it, so it put it
in quarantine. Do Trojan horses not
have names? How can I find out more
if Norton doesn't give it a name?
Dick
 
Norton found a Trojan horse in the file
c:\windows\system32\notepad.exe.
Norton could not repair it, so it put it
in quarantine. Do Trojan horses not
have names? How can I find out more
if Norton doesn't give it a name?
Dick
Click to expand...

There are several malware possibilities. Upload the notepad.exe file
for av scanning at single file sites listed here:

http://www.claymania.com/anti-virus.html

See if KAV, for example comes up with a specific malware name.

You can also find clues by Googling "notepad.exe trojan" and
"notepad.exe virus".

Let know if you have trouble finding a description that matches what
you see on your PC .. in the registry, etc.

..
Art
http://www.epix.net/~artnpeg
 
Dick M. said:
Norton found a Trojan horse in the file
c:\windows\system32\notepad.exe.
Norton could not repair it, so it put it
in quarantine. Do Trojan horses not
have names? How can I find out more
if Norton doesn't give it a name?
Dick
Click to expand...

See my message above about this problem in a previous thread.

I had a hijacker attack that I was able to stop but not before it replaced
my Notepad.exe file with a file named Notepad.exe that contained the
W32/Sillydl.dl Trojan.

It also placed a copy of the same infected file in the C:\Windows\System32
Folder and another copy of the same file renamed Setup1.exe was placed in
the C:\Temp Folder.\

I'm running Win98SE so Notepad.exe should only be in the C:\Windows
folder - same for Win95 and WinME.

In NT4, Win2k and WinXP, Notepad.exe should be in the C:\Windows\System32
(or where ever Windows resides in your system).

Delete all copies of Notepad.exe and Setup1.exe from your system and
replace them with one copy of the real Notepad.exe File wherever it
belongs depending on your operating system.

I suggest that you D/L AdAware and SpyBot 1.3 and install and run them.
You should also get a backup on-demand virus scanner such as F-Prot or
some of the other low cost or freeware AV programs that are frequently
recommended in this NG.
 
Back
Top