Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I have Norton Antivirus 2003 but have become infected with Trojan.Myss.B (Also known as: Backdoor.Avstral, Backdoor.Avstral [KAV], BackDoor-AWW [McAfee], MultiDropper-GP trojan [McAfee], Win32.Myss)
I have deleted the relevant registry entry. This has stopped the virus Process starting.Unfortunately after running a full system scan with Norton it does not recognise there are any infected files. (The summary says: no infection found). Virus definitions were updated on 10/12/03 and are showing as up to date.
The virus files and locations differ slightly from the ones posted on Symantecs website (Msapin32.dll & Wini.ini - not on my system)
The virus files I have found manually:
mssys.exe C:\
Created:13/12/03 00:47:56
mssys.com C:\windows
Created:13/12/03 00:47:47
mssys.exe-05835449.pf C:\windows\prefetch Created:13/12/03 14:23:16
couldn't quarantine: in use
msconfd.dll C:\WINDOWS\system32
Created:13/12/03 00:47:56
couldn't quarantine: in useAlso just before this virus was contracted the computer was under attack, Norton successfully deleted the following viruses:
Trojan.ByteVerify
Backdoor.Tofger
Backdoor.Daemonizehowever theses files were created on my system:
msdos.exe C:\
Created:12/12/03 23.42.30
sysini.ini C:\WINDOWS
Created:12/12/03 23.42.33
(this contains: "***Computer was successfully infected***")
svchostc.exe C:\WINDOWS\SYSTEM32
Created 12/12/03 23.42.33at the same time as the attack. Again Norton does not recognise these files (Obviously sysini.ini is not viral by itself, and Norton will not detect this file).
Is anyone able to tell me why Norton isn't recognising the virus, I've been to their website for support but the only option they give is to call their virus support helpline for £18
Is my best option to get a new Antivirus Program?
Many thanks

Copy and paste this. do online scan and see if that helps. I'm only a rookie and can't do a hijack log. Only tried once on my comp. without harm. Go here: http://www.trendmicro.com/en/home/us/enterprise.htm
Frank

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |