On line Scanning - infected by virus ?

  • Thread starter Thread starter chuaby
  • Start date Start date
C

chuaby

Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?

Regards
Boon Yiang
 
(e-mail address removed) (chuaby) wrote in @posting.google.com:
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?
Click to expand...

A maker of a virus scanner and you think it's not safe to do an online
scan with the scanner?

I doubt seriously that Trend Micro's site is going to be compromised like
that. But anything is possible and one *never* says something cannot
happen but I doubt it.

If the Download.Trojan is on your machine, it got there by some other
means, other than, Trend Micro's site.

Duane :)
 
chuaby said:
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?

Regards
Boon Yiang
Click to expand...

Sometimes an antivirus product can only find a virus, when the virus file is
activated or searched for. Therefore your normal scan does not pick up the
virus, but the online scan tries to scan into the virus file and your normal
system virus scanner see's a viral activity.
Not a great explanation, but do you understand it? That particular virus in
in the system restore folder, which is not scanned. Turn off restore,
reboot into safe mode and scan again. Problem will vanish.
 
KerplunKuK said:
chuaby said:
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?

Regards
Boon Yiang
Click to expand...

Sometimes an antivirus product can only find a virus, when the virus file is
activated or searched for. Therefore your normal scan does not pick up the
virus, but the online scan tries to scan into the virus file and your normal
system virus scanner see's a viral activity.
Not a great explanation, but do you understand it? That particular virus in
in the system restore folder, which is not scanned. Turn off restore,
reboot into safe mode and scan again. Problem will vanish.
Click to expand...

In addition to the other suggestions I would run at least one of these
other
free online virus scan programs,

RAV
http://www.ravantivirus.com/scan/

Panda:
http://www.pandasoftware.com/activescan/

BitDefender
http://www.bitdefender.com/scan/license.php

Turn off system restore, instructions here:
http://www.pchell.com/virus/systemrestore.shtml

Also go to tools in Internet Explorer, under the "General Tab"
click on "Delete Temporary Files and Delete Cookies"

Good Luck,
Tom
 
Don't know why, but trend housecall once nuked my NAV installation. So be
careful.

I don't trust NAV anymore for Trojan detection. I have used NAV for more
years than I can count. And their product has really slipped up in the last
year. It leaves Trojans sitting on your PC that you may not be aware of.
So I would really suspect a Trojan on your system. Try a free trial of KAV
(my newest favorite) or Mcafee.

Ceily
 
chuaby said:
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ?
Click to expand...

I think that it is as safe as the site is trustworthy. That particular
one is very popular - and I believe, trustworthy.
how could such thing happen when over on this same site
in the FAQ, trend micro gurantees it's safety ?
Click to expand...

That suspicious looking file (judging by the name) was probably
already on your system before the TrendMicro scan. The scan
may have brought it to the attention of your "on access" NAV
scanner when the TrendMicro scanner opened it. Perhaps you
have your NAV set to not scan your temporary internet files
folder?
 
KerplunKuK said:
That particular virus in in the system restore folder, which is not scanned.
Click to expand...

I am only familiar with the restore folders being something like

C:\_restore (on WinME)

and

C:\System Volume Information\_restore (WinXP)

That looked more like TIF to me.
 
Don't know why, but trend housecall once nuked my NAV installation.
So be careful.

I don't trust NAV anymore for Trojan detection. I have used NAV for
more years than I can count. And their product has really slipped up
in the last year. It leaves Trojans sitting on your PC that you may
not be aware of. So I would really suspect a Trojan on your system.
Try a free trial of KAV (my newest favorite) or Mcafee.

Ceily
Click to expand...
As far as that is concerned NAV can nuke its own self on the install. I
doubt seriously that an on-line scanner nuked NAV on your machine unless
you told the scanner to delete a file(s) that NAV needed.

It doesn't happen by itself. :)

Duane :)
 
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?

Regards
Boon Yiang
Click to expand...


If you don't want Norton anymore.. I advice Panda for it's allover
quality & stability.
But Norton is allover one of the best,... though it's neither
perfect,...
I would not only secure thinking about virusses & worms,... but also
about malwarez, spywarez, smap & other treaths... use a hardware
firewall (router) + a software firewall.. only a year ago one would
call me nuts investing in a double security... since the Firewall from
Norton was neither able to keep out all attacks due to an error in the
programmation,.. I don't mind to have me called over-protective.

It allows me to go online without high anxiety ;-)

Feel free to read the advices on my website
Greetz
--
www.nondisputandum.com

Protect, clean, tools, office, webbuilding
newsfeeds, entertainment, searching
+ the internet addiction test!
 
Actually, I did nothing. While trend was installing the files needed to
run, my computer went haywire and rebooted itself. (Which never happens.)
After that, NAV was totally dysfunctional. Whether it was NAVs or Trends
fault, I don't know. I just warned him to be careful.

Ceily
 
Ceily said:
Actually, I did nothing. While trend was installing the files needed to
run, my computer went haywire and rebooted itself. (Which never happens.)
After that, NAV was totally dysfunctional. Whether it was NAVs or Trends
fault, I don't know. I just warned him to be careful.

Ceily
Click to expand...

I believe you. It sounds like typical Win 9'x or ME behavior. :)

Duane :)
 
chuaby said:
Hi

I am not a security expert. I am using Norton Anti-virus (on win2000)
at the moment. A contact recommends me to try
http://housecall.trendmicro.com/ as
i suspect my PC could have virus that NAV could not detect.

i did. But when i was scanning half way, the Norton Anti-virus pops up
a Virus Alert message that my machine is infected with a virus
"Download.Trojan" in the directory :

"C:\Documents and Settings\Tempuser\Local Settings\Temporary Internet
Files\Content.IE5\M9MHWHQX\download.mp3[1].exe"

I never have such encounter before.

So, my question is, is online scanning safe ? how could such thing
happen when over on this same site in the FAQ, trend micro gurantees
it's safety ?

Regards
Boon Yiang
Click to expand...

You need to disable your resident scanner when using an online scanner.If
not,your resident may deem it a threat.
It's happened to me on the Panda site because I had forgotten to pause EZ
antivirus.C.D.
 
Back
Top