can't find trojan infected file

[nabbers]

Using Norton Anti Virus 2002 in Windows 2000 Professional, I get a message:
Trojan infected C:\WINNT\System32\explore.exe
and C:\WINNT\System32\v32driver.bat [or dll]
It is 'unable to repair' and 'denied access' to these two files.
I cannot find these two files using 'search' And the 'system scan' reports all files clean?
Am I still infected?
Should I be using another Virus Scan Program?
I am also running Norton Firewall.
Thanks.

 

[crow053]

It might have been quarantined, check reports on your norton. Also run an online virus scan. RAV, Bit Defender, are 2 good ones. Check the auto-clean option when you do.

 

[InnoTech]

unfortunately if those files are infected and past attempts of cleaning gave you those replies, there is nothing you can do but reformat. Explorer.exe is a system file that you use for everything in windows. Meaning to see your "my computer" drives and seach for files they all use this part/program of windows. Without it you're screwed. Also you don't have access to delete or view these files thats why norton can't fix it. "Jack of all trades. Master of none."

 

[smah]

crowo53 is right. Norton found them and couldn't clean, so it denied access by placing them into the quarantined folder. Now that they are in the quarantined folder, you will no longer find them. If everything is functioning normally, you can used the norton tools to delete them from the quarantined folder.

 

[InnoTech]

if explorer.exe was in quarantine how does it run? "Jack of all trades. Master of none."

 

[smah]

That file is not Windows Explorer. There is a virus that creates a file of this name, I just can't seem to find it right now. Look up the name that norton gives you on their website and you will see.

 

[InnoTech]

ooooooooooooooohhhhhhhhh!! ok, i see. i didn't think about that! "Jack of all trades. Master of none."

 

[smah]

Here are a few of the possibilites:

http://www.viruslist.com/eng/viruslist.html?id=3892

http://www.viruslist.com/eng/viruslist.html?id=4338

http://www.viruslist.com/eng/viruslist.html?id=4004

Have you looked to see what virus norton has identifed it as?