back to list

trojan horse (??)

🔗Joseph Pehrson <jpehrson@...>

9/6/2003 1:52:36 PM

Well, I ran Norton Anti-virus today and it found a "Trojan Horse."
That's quite unusual since it usually doesn't find anything on my
weekly scans. It "quaranteened" the file. It didn't look like
anything crucial (I'm assuming it was something deposited there) and,
anyway, it was infected, so I had the program *delete* it. I'm
assuming that was the correct thing to do (?)

In any case, I'm somewhat wondering how I got it. I have Zone Alarm
firewall up to date and also Norton. Additionally, I *never* open
any attachments and even refrain from opening those from friends
unless I know it's something crucial.

Any help/observations/suggestions??

Hopefully my computer will still run OK. I'm still typing this, so
it's still doing this much so far.

Thanks!

J. Pehrson

🔗Graham Breed <graham@...>

9/6/2003 2:26:33 PM

Joseph Pehrson wrote:

>In any case, I'm somewhat wondering how I got it. I have Zone Alarm >firewall up to date and also Norton. Additionally, I *never* open >any attachments and even refrain from opening those from friends >unless I know it's something crucial.
>
>Any help/observations/suggestions??
> >
Does Norton say where it found the Trojan? It may be a file you downloaded, in which case we'd better be warned of it.

Graham

🔗David Beardsley <db@...>

9/6/2003 2:06:03 PM

Joseph Pehrson wrote:

>Well, I ran Norton Anti-virus today and it found a "Trojan Horse." >That's quite unusual since it usually doesn't find anything on my >weekly scans. It "quaranteened" the file. It didn't look like >anything crucial (I'm assuming it was something deposited there) and, >anyway, it was infected, so I had the program *delete* it. I'm >assuming that was the correct thing to do (?)
>

I think so.

>In any case, I'm somewhat wondering how I got it. I have Zone Alarm >firewall up to date and also Norton. Additionally, I *never* open >any attachments and even refrain from opening those from friends >unless I know it's something crucial.
>
Every time you start your machine, run "LiveUpdate" BEFORE
you check your email. You have to update those virus definitions <http://securityresponse.symantec.com/avcenter/download.html>
or you'll get a virus. If your sub to Norton "LiveUpdate" is expired,
pay for a new one.

Damm worms killed Aug. for me. What was supposed to be the slow
season was way too busy for me. It's a good thing I didn't book
a vacation to visit my nephew in Daytona Beach.

--
* David Beardsley
* microtonal guitar
* http://biink.com/db

🔗Joseph Pehrson <jpehrson@...>

9/6/2003 3:15:40 PM

--- In metatuning@yahoogroups.com, Graham Breed <graham@m...> wrote:

/metatuning/topicId_5674.html#5675

> Joseph Pehrson wrote:
>
> >In any case, I'm somewhat wondering how I got it. I have Zone
Alarm
> >firewall up to date and also Norton. Additionally, I *never* open
> >any attachments and even refrain from opening those from friends
> >unless I know it's something crucial.
> >
> >Any help/observations/suggestions??
> >
> >
> Does Norton say where it found the Trojan? It may be a file you
> downloaded, in which case we'd better be warned of it.
>
>
> Graham

***Yes, it did. It was in C:\Windows\ and I *think* \System\, and
the file had a rather long and rather crazy name to it, as I recall.
(Nothing simple that somebody would download.)

Other than that, I can't remember, since there is no record of it now
that I deleted it and it's not in my "Recycle Bin..."

JP

🔗Joseph Pehrson <jpehrson@...>

9/6/2003 3:18:34 PM

--- In metatuning@yahoogroups.com, David Beardsley <db@b...> wrote:

/metatuning/topicId_5674.html#5676

> Every time you start your machine, run "LiveUpdate" BEFORE
> you check your email. You have to update those virus definitions
> <http://securityresponse.symantec.com/avcenter/download.html>
> or you'll get a virus. If your sub to Norton "LiveUpdate" is
expired, pay for a new one.

***LiveUpdate, on my machine, runs *automatically* whenever they get
the updates to send me, or at least that's what it *seems* to do...

I *always* let it completely run "LiveUpdate" when I turn on my
machine before I start to do anything else. (Usually it updates
every couple days or so...).

And, of course, I keep my "LiveUpdate" subscription current...

JP

🔗David Beardsley <db@...>

9/6/2003 3:30:45 PM

Joseph Pehrson wrote:

>--- In metatuning@yahoogroups.com, David Beardsley <db@b...> wrote:
>
>/metatuning/topicId_5674.html#5676
>
> >
>>Every time you start your machine, run "LiveUpdate" BEFORE
>>you check your email. You have to update those virus definitions >><http://securityresponse.symantec.com/avcenter/download.html>
>>or you'll get a virus. If your sub to Norton "LiveUpdate" is >> >>
>expired, pay for a new one.
>
>***LiveUpdate, on my machine, runs *automatically* whenever they get >the updates to send me, or at least that's what it *seems* to do...
>
>I *always* let it completely run "LiveUpdate" when I turn on my >machine before I start to do anything else. (Usually it updates >every couple days or so...).
>
>And, of course, I keep my "LiveUpdate" subscription current...
>
>JP
>
Sounds good to me!

--
* David Beardsley
* microtonal guitar
* http://biink.com/db

🔗Carl Lumma <clumma@...>

9/6/2003 10:28:26 PM

"Live Update" sounds more like a vector for viruses than anything
that might prevent them to me.

🔗Carl Lumma <clumma@...>

9/6/2003 10:28:26 PM

"Live Update" sounds more like a vector for viruses than anything
that might prevent them to me.

🔗Joseph Pehrson <jpehrson@...>

9/7/2003 6:53:33 AM

--- In metatuning@yahoogroups.com, "Carl Lumma" <clumma@y...> wrote:

/metatuning/topicId_5674.html#5685

> "Live Update" sounds more like a vector for viruses than anything
> that might prevent them to me.

***Hi Carl,

Wouldn't Symantic go out of business, though, as soon as that be
known??

JP

🔗Carl Lumma <clumma@...>

9/7/2003 9:53:56 AM

> > "Live Update" sounds more like a vector for viruses than
> > anything that might prevent them to me.
>
> Wouldn't Symantic go out of business, though, as soon as
> that be known??

Well, Microsoft hasn't gone out of business for providing open
doors for viruses in all their software. Even if such an event
put Symantec out of business, it's likely that more damage
could be done to the economy from the virus than the loss of
Symatec's business.

Just a note, this is more of a theoretical point. If what
you're doing works for you, don't change it without having a
very detailed understanding of what you want to change it to.

-Carl