Norton AntiVirus won't remove "At Risk" threat.

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Wonderstar, Aug 10, 2004.

  1. Wonderstar

    Wonderstar Private E-2

    Hi Everyone,

    This looks like a great place to be when your computer misbehaves. Thanks to all those responsible for this site....and to all fellow members. To start off, my problem lies when trying to delete the filename 'update 1.exe' (thats correct there is a space between the word 'update' and the '1') after running a Norton 2004 AntiVirus scan. I have an Update Class file in my Internet Properties folder under Settings then View Objects (size being 120KB), and I think this file is the good one. All other Anti-Virus software I have (ie: Ad-aware 6.0, Registry Mechanic, and AOL Spyware) run clean....meaning 'no threats were detected'; However, AOL Spyware does list threat names 'Alexa', Clear Search', and 'WinFavorites' as blocked items, and has successfully blocked these from future scans. What is "WinFavorites"??? This sounds suspicious too. I suspect the filename 'update 1.exe' is the culprit, and 'WinFavorites' may also. Can I delete Winfavorites from future AOL Spyware scans or permanently from my computer? Is it safe to do so? I heard Alexa, and Clear Search are files to keep. And should I check off item '016' from my log file....if anyone sees any other bugs floating around in my log file, please advise....Here's the log,

    Logfile removed and attached
     

    Attached Files:

    Last edited by a moderator: Aug 10, 2004
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Hi,
    First off, your running an old version og Hijack This, I hope all your other tools are up to date. Log file looks pretty clean, one of the better I have seen lately. Try running Nortons from safe mode. Odds are it can not remove it because the file is in use. Optionally, try pressing "ctrl alt and delete" and go to processes tab and stop update 1.exe and see if Nortons can remove it now.

    Info on WinFavorites:
    http://sarc.com/avcenter/venc/data/adware.winfavorites.html

    Alexa is a website that ranks websites you go to, tracks what you do to offer people lists of similar websites. Considered spyware, not really. Keep it if you want.

    As for removing 016, I cant tell what it is, do you know. Odds are it should not harm anything. It does not bother me. Most spyware programs call every cookie in the world bad as well, and that is entirely untrue.

    Let me know how you make out.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    One additional note. As MA said your HijackThis is out of date so get the new one but this time do not put it on your desktop or a temp folder. Put it in its own folder (like C:\Program File\HJT ) so that it has a place to store the backups it creates. Using the Desktop or a Temp folder makes you very susceptable to loosing the backups.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds