Help with VBS/lnor virus 1

[Rhombus65]

I ran an online csan of my computer from the McAfee web site.

It came up with a virus it calls VBS/lnor

It stated the virus was in the file
"C:\Documents and Settings\...\cyber[2].hta"

I did a search of my machine and was not able to find such a file.

Does anyone have any insight they to share with me?



Jim: A+, MCP W2k, Master Electrician

"The important thing is to not stop questioning. Curiosity has its own reason for existing..."
-Albert Einstein

 

[SESaskDFC]

Howdy:

Based on your post, I am guessing you are running XP.. PLEASE give full system details in the future !!

Disable System Restore.. Now, boot into safe Mode and run a new full system scan.. Reboot and re-enable System Restore..

http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100598

Murray

 

[Rhombus65]

SESaskDFC:

Thank you for your reply and sorry for lack of info.

Running W2K Pro.

I ran the scan from their web site. I do not have McAfee installed. I have Norton AV. Norton does not find the virus. I also ran PC-cillian on line after posting this question. It found nothing either.



Jim: A+, MCP W2k, Master Electrician

"The important thing is to not stop questioning. Curiosity has its own reason for existing..."
-Albert Einstein

 

[SESaskDFC]

So, what happens if you go back to McAfee and run their scan again??

Have you dumped all your temp and temp internet files??

Murray

 

[Rhombus65]

I have not dumped my temp files. Good suggestion! Thank you.

The file does not seem to be on my computer, but McAffee keeps saying it is there. Really weird!

I will try emptying temp files and rescan then let you know.

Thank you for thoughts.

Jim: A+, MCP W2k, Master Electrician

"The important thing is to not stop questioning. Curiosity has its own reason for existing..."
-Albert Einstein

 

[Rhombus65]

SESaskDFC:

Thank you for your help.

I emptied my temp files and rescanned. No viruses were found.

Again thank you.

Jim: A+, MCP W2k, Master Electrician

"The important thing is to not stop questioning. Curiosity has its own reason for existing..."
-Albert Einstein