Jump to content
FriedFish

Trojan Keeps Showing Up After Being Removed...?

Recommended Posts

I am running the trial version of Immunet. I get warnings of a trojan located in a tmp file in one of my ../Program (86)/.. subfolders. Immunet quarantines it. I delete it, Then in a day or so, it shows up again in another subfolder. I assume there is something putting these trojans into my system after they were cleaned out. Here is the type of information I get:

 

C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\00031004.tmp is Trojan.Generic.9853649

C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\00019370.tmp is Trojan.Generic.9853649

 

How can I find the source of these and remove them once and for all?

 

 

Thanks,

 

I started looking through file history "All File Events" and found a place where it claims Norton is installing the trojans. The information looks like.

post-28966-0-29158900-1389383341_thumb.png

 

Is this a false positive or is my Norton infected?

 

Here is another alarm from Immunet about Norton.

 

post-28966-0-51961300-1389383333_thumb.png

What is going on here. I thought Immunet was suppose to be compatable with Norton and other standard anti-virus software. Is my Norton infected or is Immunet wrong?

 

Thanks

Edited by FriedFish
  • Like 2

Share this post


Link to post
Share on other sites

Hi FriedFish (cool name),

 

So, let's split this by parts.

 

First, I assume that you are seeing Immunet Pop-up saying 'File quarantined' every so often informing you about these particular files.

 

It is possible that you have an infection somewhere else in your system. Do these files appear at any particular point during your computer use? (While surfing the web, running a particular application, and so forth?)

 

For the Norton issue, can you send me a screenshot (here or to support@immunet.com, with the subject line being 'Forum - Trojan keeps showing up after being removed...? - Jose') of exactly what you are seeing?

 

It is possible that Immunet and Norton are trying to scan each others files (definite problem). You can add exclusions in Immunet for Norton (and viceversa) to stop this issue from happening (whenever you have more than one AV product, this is a necessary step to avoid them hampering each other).

 

Let me know.

 

-Jose

Share this post


Link to post
Share on other sites

I edited my original post and added Immunet screen shots. Let me know what you think. Why would Norton be putting tmp files around in my ../Programs (86)/.. folders? I am using the program interface and looking at scan history. I also get the popup with Threat Quarantined pointing to the same Trojan name.

Edited by FriedFish

Share this post


Link to post
Share on other sites

Hey FriedFish,

 

Can you please add exclusions for Immunet to Norton and Viceversa? I wouldn't know exactly why Norton was doing such a thing, but Immunet definitely should not be scanning Norton's activities (they might consider each other malicious, or just interfere with quarantines, causing errors).

 

To add exclusions for Norton in Immunet, see here.

 

And you would need to do the reverse process in Norton, so that Norton does not scan Immunet.

 

You could probably ask Norton's support people exactly why they are doing those things, although they might just be files quarantined by Norton that are getting backed up by Seagate (sounds fishy to me, but I couldn't really help you in that regard, since I have little experience with either Seagate or Norton).

 

Let me know.

 

-Jose

Share this post


Link to post
Share on other sites

Hello persistent, it's quite obivious to me that you had a less than favorable experience with some Norton product! Given your view and even though Norton is a competitor we still don't encourage or condone bad mouthing of other anti-virus companys on this forum. Besides, if we, ourselves, did something like that not only would that be unethical but very unprofessional as well "and" that's definetly "not" the purpose of this community of forum members. I bet you're a smart fellow so I'm sure you can understand that. I leave your thread "undeleted" so other froum members may use this as a reminder.

 

Regards, Ritchie...

  • Like 1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×