Norton can't do anything about my virus, so what do I do about it?

[funxus]

I did a virus scan yesterday and found that the file crackerbox.exe (I don't know what it does) was infected by some virus. I agreed to quarantine, but for some reason it wasn't quarantined. When searching files in windows I can't find it, so I assume it's in a zipfile.

My question, what should I do, why doesn't Norton work? I'm also wondering if there's a program searching through both normal files and zipfiles at a relatively good pace?

Thanks for any help.

 

[CrackedCrystal]

I am pretty sure that crackerbox.exe IS the virus, not that it is infected by it. It should be deleted.

Did a little research, the virus will not hurt your computer, but it is ment to send traffic to mp3.com.

Why do you say it is not quarentined, does it not show up in Norton's quarentined list? I am not supprised at all that a windows search can't find it. Norton is probably hiding the file so nothing activates it.

And what is Norton not working at? It found your virus.

EDIT: Anyone else notice a huge increase in virus postings lately?

 

[Jeratain]

Originally posted by CrackedCrystal
EDIT: Anyone else notice a huge increase in virus postings lately?

I've noticed that a lot of people aren't browsing the net safely. A huge amount of internet users are absolutely oblivious to the spyware and/or viruses that are on their computers.

 

[ainwood]

Most of it is because the spyware is a pandemic. I use Zone Alarm, supposedly "immunising" my PC, and am still picking up a couple of double-click types every week.

The really scary thing is this happens just visiting the same few sites regularly (online banking, online newspapers and forums).

Although I see one of them has just been prosecuted (or charged at least) for dubious tactics - making there spy installers look like windows system messages.

re this specific issue, I thought that some virus scanners looked at 'expected' file patterns, and could identify appendices to files, even if they were unknown virii - maybe that's how it got picked up by Norton.

Notwithstanding what crackedcrystal said though....

 

[funxus]

Originally posted by CrackedCrystal
I am pretty sure that crackerbox.exe IS the virus, not that it is infected by it. It should be deleted.

Did a little research, the virus will not hurt your computer, but it is ment to send traffic to mp3.com.

Why do you say it is not quarentined, does it not show up in Norton's quarentined list? I am not supprised at all that a windows search can't find it. Norton is probably hiding the file so nothing activates it.

And what is Norton not working at? It found your virus.

EDIT: Anyone else notice a huge increase in virus postings lately?

Thanks for checking it out. On symantec it says that it uses an exe file called crackerbox.exe, and that the virus is called Trojan.Crabox.

When it found the virus I told Norton to Quarantine it (and I can't remeber if I told it to delete after it's been quarantined), but after this Norton went back to some Status/Report where it said that my computer was still infected with 1 virus. I therefore did the whole search again with Norton, and it found the same virus, I told it to quarantine it and it still said that my computer was infected with 1 virus. There's nothing in the quarantine.

My point is that it doesn't help me much that Norton finds it, if it can't get rid of it... Still, it's probably me just not being very used to Norton since we seldom get viruses, e.g. I haven't been able to get the Auto-Protect to start up with windows, the email protection can't be turned on...

 

[CrackedCrystal]

There is one other possibility. Do you have system restore turned on? Noton will find but will be unable to remove infections inside the system restore files. In that case, it will keep saying you have a virus. Either way, don't quarenine it, just delete it (there is an option for that isn't there?). There is no need to try and "fix" crackerbox.exe. The entire file has no purpose other than serve the virus.

@ainwood: Yeah, virus scanners do only look for parts of a virus, but funxus said that it was in crackerbox.exe. Since that file is the crackerbox virus, I doubt that its a fake positive. But I see where you are coming from. But if there is still a pointer to the file, that is a major problem. In that case Windows is failing to properly update the file structure.

 

[funxus]

I found the file, it was inside a .cab file inside an .exe-zip file. So after deleting that file, the whole virus was gone. I doubt it was ever activated since it was far into a file I never used. Thanks for all the help.