Trojan Galapoper virus when opening IE 6

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Periodically (about twice a week) upon opening IE 6, I get a message from
Norton Antivirus 2006 that it has removed Trojan.Galapoper.A from
c:\windows\system32\gbfgayhv.exe. Always the same message, always the same
file name. Is my browser corrupted? If so, how do I fix? So far, Norton
seems to catch this but there may be problems underlying that I dont see.
For reference I also run Webroot Spysweeper. I run a full system scan with
both Norton and Webroot at least once a week and I keep both applications
continually updated with new virus/adware definitions.
 
billbrandi said:
Periodically (about twice a week) upon opening IE 6, I get a message from
Norton Antivirus 2006 that it has removed Trojan.Galapoper.A from
c:\windows\system32\gbfgayhv.exe. Always the same message, always the same
file name. Is my browser corrupted? If so, how do I fix? So far, Norton
seems to catch this but there may be problems underlying that I dont see.
For reference I also run Webroot Spysweeper. I run a full system scan with
both Norton and Webroot at least once a week and I keep both applications
continually updated with new virus/adware definitions.
Click to expand...
Hi Bill,
Delete the File mentioned, Open the Windows Explorer and Localte the Path :
c:\windows\system32\gbfgayhv.exe and Delete the File gbfgayhv.exe but not
the C:\Windows\System32.
You will find the file in the Temp files I think.
Then do a Scan in both mode (Sfae and Norml)
hope this helps
Please let us know
nass
 
The file is not on the computer since Norton intercepted it and quarantined
it. I did find on the Norton site the instruction to disable the XP Recovery
feature, then run a scan. I did that and no problems were detected. I am
still trying to find out why I get this virus attempt when I access Google
using IE.
 
billbrandi said:
The file is not on the computer since Norton intercepted it and quarantined
it. I did find on the Norton site the instruction to disable the XP Recovery
feature, then run a scan. I did that and no problems were detected. I am
still trying to find out why I get this virus attempt when I access Google
using IE.
Click to expand...
Open the Quarentine Files on Norton and you will be given the Choice to
Delete or Keep the File Quarentine.
If no Joy Try to send Norton the Sample if they have such option and ask
them about this behavior.
Try another Scan such http://www.pandasoftware.com/products/activescan.htm
and see the report from the scan, also Scan for Malware.
Malware can cause this issue for malware and worm remover try this:
http://www.avast.com/
hope this helps
nass
 
Back
Top