Trojan.SpamThru: What's wrong with my Nortan AntiVirus?

  • Thread starter Thread starter iwannafly
  • Start date Start date
I

iwannafly

Almost every one minute, Norton Symantec AntiVirus Corporate Edition
pops up an auto-protection window:

saying that it found a Trojan.SpamThru.... and deleted it...

http://img237.imageshack.us/img237/3390/gggxr6.jpg


But these messages seem no ending... and the windows keep popping
up...

I searched everyone and didn't find symptoms such as the trojan
modifies the hosts file, etc.

And the location of this risk is very strange, it is located under the
Symantec folder itself, as shown below:

C:\Documents and Settings\All Users\Application Data\Symantec\Symantec
AntiVirus Corporate Edition\7.5\APTemp\

What's wrong with my computer? Is there really a virus? Or it is just
the Nortan Antivius has something wrong?

Thanks
 
I said the symptoms are not correct. It does not look like a
SpamThru.
For one thing, the hosts file did not get modified at all.
Click to expand...

Do you have something like spybot locking the hosts file?

Regards, Dave Hodgins
 
Do you have something like spybot locking the hosts file?

Regards, Dave Hodgins
Click to expand...

No. I don't have spybot.
This is a new laptop freshly arrived on Friday.

All I have are Norton and TrendMicro's Internet Security, running
together.
 
iwannafly said:
Almost every one minute, Norton Symantec AntiVirus Corporate Edition
pops up an auto-protection window:
saying that it found a Trojan.SpamThru.... and deleted it...
http://img237.imageshack.us/img237/3390/gggxr6.jpg
But these messages seem no ending... and the windows keep popping
up...
I searched everyone and didn't find symptoms such as the trojan
modifies the hosts file, etc.
And the location of this risk is very strange, it is located under the
Symantec folder itself, as shown below:
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec
AntiVirus Corporate Edition\7.5\APTemp\
What's wrong with my computer? Is there really a virus? Or it is just
the Nortan Antivius has something wrong?
Click to expand...

Trojan.SpamThru is a Trojan horse that can be used to send unsolicited
email through the compromised computer:
http://www.symantec.com/security_response/writeup.jsp?docid=2006-111716-3107-99

-jen
 
iwannafly said:
No. I don't have spybot.
This is a new laptop freshly arrived on Friday.
All I have are Norton and TrendMicro's Internet Security, running
together.
Click to expand...

You can't run two AV's together... That's most likely your problem.
Also, follow up on all the cleanup instructions on the Symantec site.

-jen
 
Back
Top