Solved Trojan.ADH.2, Norton, WINXP vs WIN7, CD not seen in drive

November 4, 2015 at 19:32:32
Specs: WIN 7, Power PC G4/2GB

I have this CD-R I got with an ACHI BGA soldering machine on Ebay awhile back. I think it was in 2012. It came from an authorized reseller of this Chinese equipment. The order when it arrived came in from China. The CD looked odd to me for what its for. It was labeled KONA Electronics with two pigs under an umbrella on it. I put this CD in a windows XP machine. Autoplay was set to ask me for everything. I scanned it with Norton 2012 and it told me that there was a suspicions Trojan.ADH.2 on the disk. I had looked this up on the Symantec website. The definition of Trojan.ADH.2 was something like a program that has been built or programmed in an unconventional way making it suspicious. So, it sounded like it was unclear whether or not a threat really existed. I contacted the reseller who contacted the manufacturer and was told everything is fine. At any rate, I needed the program to run the machine and so installed it on an isolated XP box, which as it turned out I never got around to using. Anyway, its a few years later now so I thought I would scan it again to see if it still flags it with the latest stuff. I put it in a WIN 7 machine to run the current Norton on it, but it is not even being recognized in the drive. The green progress bar at the top of the My Computer Folder window goes on progressing for infinity and the CD eventually stops spinning. There is no notification of any kind from Norton. I told Norton to run a scan on it anyway, but it just scans and scans and scans nothing. I ended up forcing shut down of the computer. I reboot, ran Norton Power Eraser, and then a normal Norton Antivirus scan. It found nothing. Can someone explain this? Why would XP recognize the CD, but not windows 7? And am I really safe in my thinking that I can put an infected CD in my tray so long as autoplay is turned off?

See More: Trojan.ADH.2, Norton, WINXP vs WIN7, CD not seen in drive

Report •

November 5, 2015 at 02:19:27
✔ Best Answer
May be the CD got damaged since you used it on the XP machine.

Regarding your last question, an infected CD could still infect a PC on which autoplay is disabled because all it takes is for you to click on an infected file on the CD.

message edited by phil22

Report •

November 5, 2015 at 18:32:51
I used the CD in an XP machine again and it is accessible. The drive in my WIN7 machine is newer and should be more capable with different media types.

What bugs me is that even if autoplay is off and you as the user don't click on any files. The computer and drive still must interact with the disc for it to even be accessible by you. So what is stopping it? If it was Norton, I would think it would tell you as it likes to brag.

One other thing disabling autoplay won't save you from - reboot if your drive is in the boot order.

Report •

November 5, 2015 at 19:39:30
Do other burned cd's read OK on the windows 7 machine? I assume the windows 7 drive is a DVD drive. Sometimes they can fail to read a cd but still read a DVD.

Or if the disk is bad but still works in the XP computer (and it has a cd burner in it) try burning a copy and see if that works in the windows 7.

Report •

Related Solutions

November 6, 2015 at 19:45:36
The windows 7 PC has a DVD burner and the XP PC has a DVD ROM drive.

The infected CD is marked "80min / 700 MB 52x multispeed CD-R.
I wrote a text file to a blank Verbatim 80min / 700MB 52x CD-R at 40x (max setting) and read it back on the WIN7 PC with no trouble.

Report •

November 6, 2015 at 20:14:25
I still think you need to find a way to copy the disk in a machine that recognizes it.

Or maybe they could send another disk or provide an ISO download or even just the files on the disk.

Report •

November 7, 2015 at 20:03:46
Well, I went to the trouble of installing a burner I had laying around into the XP machine. Turned out the DVD-ROM was actually a burner as well, it only said DVD-ROM on the front of it.

Anyway, I made a copy, but Norton blocked the file setup.exe from being copied.

I put the copied CD (less setup.exe) in the WIN7 machine. When I went to scan it Norton had a hiccup and went through some error recovery. I then scanned the disk and it scanned fine. At this same time, Norton flagged a file I had downloaded some many months ago from the Driver Guide Download site. I had scanned that file a number of times (along with my whole downloads folder) and it had come up clean before. Oddly it showed the download date to be today.

I then tried the original infected CD again and it was recognized in the WIN7 box this time. I scanned it and Norton flagged it as Trojan.ADH.2 still. I looked into sending a sample to Symantec. And there is a retail user site to do so, but it wants the file in ZIP or WINRAR or for you to point to it with a URL (in http, https, or ftp format). I could get neither option to work, due to Norton blocking me from zipping the file and being unable to point to the drive via a URL. Just for kicks I tried to zip other files from the CD and Norton let me do that.

Report •

November 7, 2015 at 23:55:26
Sounds like norton may be interferring a bit too much with what you want to do. You may need to disable it when it gets in the way.

Report •

Ask Question