Forum Home
Press F1
 
Thread ID: 32361 2003-04-16 08:25:00 I Have Had Worms, So Why Didn't Norton's Detect Them When Doing A Scan? Pauline (641) Press F1
Post ID Timestamp Content User
136233 2003-04-16 08:25:00 I have had the Kitro worms B & C. They were only detected while using Ad-aware & the Norton's Quarantine thing came up then, & not when doing a virus scan, I had to do an online scan to find out what/where & how many files were infected, there were 24 of them. They arrived in Incredimail which has now been removed.
These are very nasty worms & even made changes in the SMTP settings.
There is no removal tool at Symantec so had to get rid of the files through DOS.
The infected files were in Windows/Restore/Temp. I have always done a Live Update as well as the Automatic Update twice a week.
So my question is:
Why didn't Nortons detect them while doing a virus scan? Yet the quarantine thing came up while using Ad-aware.
Any information would be appreciated.
Pauline.
Pauline (641)
136234 2003-04-16 08:38:00 If the infected files were in your restore directory, they would not pose any threat unless you restored your system from an earlier (infected) time.

Perhaps Nortons is not set to scan the restore folder, or the fact that these worms can also defeat some AV programs may be an issue, and may explain how they were on your system without your knowledge.

I know they can defeat Panda and Kasperski (sp?) but unsure about NAV
godfather (25)
136235 2003-04-16 09:53:00 Well a virus scanner will not always pick up worms/trojans. -=JM=- (16)
136236 2003-04-16 10:09:00 Hi

Also the infection may have been time or event dependent with the worm(s) staying hidden untill activated .

I had a similar experience with a virus that hid in the win temp folder, on the family computer, until a particular time had elapsed . By the time I had downloaded (on a diff comp) a tool to clean and fix it PC-cillin had detected over 1300 instances of the virus or its morfed cousins . The av software did not detect it untill the file was activated then BAM .

Cheers

Murray P
Murray P (44)
136237 2003-04-16 10:26:00 Surely if you had Real-Time protection enabled it would have picked them up when the came onto your PC? No? Chilling_Silence (9)
136238 2003-04-16 10:40:00 it sounds like nortons had found it hence the files in quarantine.
also check if the antivirus is set to scan ALL files.
tweak'e (174)
136239 2003-04-16 10:43:00 > it sounds like nortons had found it hence the files
> in quarantine.
> also check if the antivirus is set to scan ALL files.

My mum sent me to the doctor for the detection of worms
Lizzie.B (3233)
136240 2003-04-16 10:47:00 >My mum sent me to the doctor for the detection of worms

good for you. i hope you got a lolly pop :p
tweak'e (174)
136241 2003-04-16 10:54:00 > > My mum sent me to the doctor for the detection of
> worms
>
> good for you. i hope you got a lolly pop :p

:D :p hehehe
stu140103 (137)
136242 2003-04-16 23:59:00 I use Panda antivirus ,pestpatrol plus adware6 pro plus spybot always use after a install of new programs each has its own strengths and detects things the others miss there is no one perfect solution kiwibeat (304)
1 2