I ran Norton last night and it ran forever so I took a look at in the morning and it found (two) W32.tiot and something else-I cannot remember. I tried to have it repaired/deleted and none was successful. I followed the paths and deleted them manually. But I am not sure if its gone. I used DAP and this is one where the W32 toit was supposed to be- So that too I deleted. I have not run any other scans at this point. Another worm was found earlier was
[email protected] and Alcan worm-not sure if this is gone as well.
I do have most recent of:
Ad-Aware SE 1.06
Spybot-S&D 1.4
Spyware Blaster 3.4
I have ran them all and from the beginning of all of this it had not picked up anything but NAV did.
My NAV after loggin off and then back on would not turn on as part of the problem and I found a quick fix but prefer to have it as it should be. I took the Ccapp.exe shortcut from its location C:/prog/common/symantec shared/ccapp.exe And placed in C:\Documents and Settings\All Users\Start Menu\Programs\Startup and this works. The only problem is that at startup it is the last program to startup and therefore I continue to get the warning message that it is turned off- until it auto starts at startup.
Ok- per Deodar's suggestion I did download and run worm
[email protected] microsoft and nothing was found. Clean.
running PandaActiveScan now...full pc scan- It's been running for sometime...so I will update you on my progress and once I have ran HijackThis. Thanks again for all those that gave my post the attention. I am most grateful.
____________________________________________________
Ok here is what PandaActive Scan Found: Are these truely viruses?
I
ncident Status Location
Possible Virus. No disinfected C:\Program Files\BitPim\_libusb.dll
Possible Virus. No disinfected C:\Program Files\Mozilla Firefox\TrueImageCorporateWorkstation8.0_d_en.exe[AcronisTrueImageAgentWorkstation.msi][unk_0054][_D4A89383F06D901FA36B4C07D65D9BAC]
Possible Virus. No disinfected C:\Program Files\Mozilla Firefox\TrueImageCorporateWorkstation8.0_d_en.exe[AcronisTrueImageWorkstation.msi][unk_0056][_D4A89383F06D901FA36B4C07D65D9BAC]
Virus:Eicar.Mod No disinfected C:\Program Files\PestPatrol\Help.chm[HowCanITestDetection.html]
Possible Virus. No disinfected C:\Program Files\Susteen\Driver Installers\DP\USB Drivers\USB IrDA Driver\DATA1.CAB[resirmon.exe]
It references DataPilot and BitPim two programs I use to transfer data to and from my cell phone.
Acronis TrueImage what is this? Is it a program?
This is a full computer scan two hours worth. I guess what is left is to run HijackThis. Its pretty late now...so I will have to start up again tomorrow.