Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I booted up my computer and my 4 year old non-updated macafee said that part of symantec norton antivirus was infected with win95/coke virus, it told me to delete it but I didnt because I have had macafee say I got virus before and I didnt.
HELP!!!!!!

I just totaly shut down computer and retsarted, now mcafee dosent say crap! What is with this?!?!?!?! Mcafee said The Sims game had a virus when we first got it also, I ignored it. Now it says something about ndetect in noton having a virus called win95/coke.22231 I havent updated mcafee in like 4 years.
HELP PLEASE

Just checked Symantec web site, and no
where on the site is a win95/coke.22231
virus definition. May hae been just a fluke?

Hi Aaron.
Better get your anti-virus software updated.
Here is the definition for that virus.
sends themselves away by email and deletes files of anti-virus software
http://translate.google.com/translate?hl=en&sl=de&u=http://www.magic-hand.de/avhelp.htm&prev=/search%3Fq%3Dwin95/coke%26hl%3Den%26lr%3D%26ie%3DUTF-8Take care,
Linda

Anyuone got yahoo or msn messengewr that you can contact me on? if so post your address here PLEASE I NEED HELP

I got few minutes left, I scanned symantec folder with mcafee even though mcafee is years old and IT SAYS ITS CLEAR WHAT THE CRAP IS DOING THIS?
Could it possibly be a false alarm?
mcafee said that w95/coke was detected inb a toy story 2 screensaver a friend had he also had mcafee, is it a false alarm maybe or what? mcafee occasionaly goes off for no reason like with new games sometimes what do you think i need help fast

Hey Dude! Calm Down! Get a decent Anti-V program & scrap the old McAfee. How do you expect a 1998 program to find a 2002 virus?
There are plenty of good Anti-V programs available for free online. McAfee, Norton & others offer free 30-day trials of their latest software, & their are some that are downright free. Just search thru Google.
Also, do you use KaZaA or any other file sharing program? They're loaded with Spyware! Download AdAware...it'll find & delete it...including any registry entries.

see here...
http://www.geocities.com/SiliconValley/Heights/3652/false.html
from there...
"Polymorphic Viruses-
Polymorphic viruses encrypt their code and generate a random decryptor for each file. Some antivirus programs still use methods that are susceptible to false alarms. If only a single file is reported to be infected or the file reported to be infected is a data file, then it's likely a false alarm. Some polymorphic viruses that sometimes create false alarms are MtE.Encrypted, Virogen.Asexual, Mnemonix, TPE.Bosnia, and Win95/Coke.22231."see this:
http://www.cknow.com/vtutor/vtpolymorphic.htm
So if you get a newer version of your av program then you shouldn't get so many false alarms as the newer versions can detect a polymorphic virus.
But could it be this one...?
http://vil.mcafee.com/dispVirus.asp?virus_k=99161
Search for Ke.bat. If you find it you're infected. I bet you don't find it.
But to put your mind at ease run a virus scan here:
http://housecall.antivirus.com/
If it says you're clean then you are.

Ok thanks for the MANY websites!
The housecakk.antivirus thing only worked the first time I did it, ever since it gets to 95% on the update and freezes.
Does this virus (if I got it) do any harm?
Iam a little confused about the polymorphic thing, does that mean that older AV's like mcafee will suspect a perfectly normal program like norton update, to be infected with coke?
On find files and folders I typed
Ke.bat
C:\AncEV.sYS
C:\COCOAINE.SRC
and it didnt find anything, does that mean iam clean? Could someone maybe explain why norton update would suddenly cause mcafee to say I got coke virus? It never had any trouble with Norton2002 before?
Thanks alot for everyones replies!
Aaron

oops P.S. I dont use kazaa or any other file sharing, I got zonealarm free version norton auto-protect mcafee v-shield (3-4 years old) Pest Patrol and Ad-aware 5.8

I'd still dump McAfee...your version is really too old to do much good. If you haven't already done so, get the McAfee VirusScan 30 day trial version, at least that will help for a while...& there are ways around the time limit ;o)

What would cause a false alarm and is there any other ways I can tell if I got the virus? Iam running housecall scan now its pattern file 305 which is from couple months ago, It wont update anymore will that still pick it up if its there?

Ok the housecall scan is clean (of course).
What does everyone think? False alarm or virus? Please explainwhy you think its a virus or false alarm.
Thanks for everyones replies so far, I will continue to check this post :-)

I don't use Norton so I'm not really familiar with it...but I assume it has DAT files that should be updated periodically. Have you done that recently? If not, update your DAT & scan again.

Yes I check for updates every day.
I taLked to a Mcafee tech on there technical chat thing and he said its most likely a software conflict because I have 2 antivirus programs running. I told him that I installed norton couple months ago and this just started happening he said it happends to other people to. What do you all think?
Aaron

Iam re-posting this so more people get to see it. Go to:
http://www.computing.net/windows95/wwwboard/forum/124929.html
For future posts and replies.
Ill still check this post also.
Thanks!

Ok I just thought of simple question.
Mcafee detected it in Symantec (norton antivirus company) folder and I could click either:
Clean
Stop
Delete
and few other things, I didnt know what to do so I clicked CLEAN it said is uncleanable so I clicked STOP and the box went away. Now if Mcafee did detect a REAL virus in Norton it would find it again would it? I have 4x version of Mcafee some guy told me because It came pre-installed on my computer and I got it in 1999. If it was a real virus Mcafee would find it again right? If it was just a conflict what would it do?
Thanks
Aaron

Aaron, you're clean so don't worry about it. As i mentioned, the newer versions of todays antivirus scanners like Norton 2002 which you have and the Housecall online scanner will detect a polymorphic virus if you had one. They didn't detect anything so you don't have one, trust me on that. Ndetect which you mentioned is used by Norton's Live Update. It's not a virus. Mcafee is giving you false alarms. Get rid of that old program and just use Norton.

By the way, if you do uninstall your old version of Mcafee make sure it's not still running in the background before removing it or else you might end up with problems after. Or remove it from safe mode. It won't be running there.

Ok thanks jaz, I just found the log for Mcafee, could you maybe determin if is still a false alarm by lookin' at the log? If Mcafee "denys access" to a file will other antivirus programs still scan that file?
*******************************************
9/3/02 10:23 PM Infected Default C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\NETDETECTCONTROLLER.DLL Win95/Coke.22231
9/3/02 10:24 PM Clean Error Default C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\NETDETECTCONTROLLER.DLL Win95/Coke.22231
9/3/02 10:26 PM Move Error Default C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\NETDETECTCONTROLLER.DLL Win95/Coke.22231

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |