NAV 2005 detecting a trojan horse A0037442.exe 1

[BluByU]

I have a very frustrating problem with my PC. Several times a day, NAV 2005 pops up a warning dialog box saying that it has detected a trojan horse in file "C:\System Volume...\A0037442.exe" Trouble is, this file does not exist on my hard drive, and there are no references to it in my registry. Doing a virus scan in NAV 2005 returns no viruses.

I had Symantec support helping me with this problem Saturday night for a couple of hours (billed me #39.95!). They had me run "hijackthis" and send them the log file. I fixed the entries they suggested, but this message still keeps poping up. This, after they assured me they had fixed the problem. Now they want me to spend another $30 for "premium service" so that they can remote control into my computer to fix the issue they couldn't fix before.

Can someone please give me some help in getting rid of this virus? Thanks!

 

[erikhertzel]

I would run an online scan like this:

http://www.pandasoftware.com/products/activescan.htm

I would check for malware as well:

spysweeper:

http://www.sabethacomputing.com/downloads/ssfsetup266_1830745541.exe

Update the defs and do a sweep.

Also check this out:

Ewido download will get trojans and other malware:

http://sabethacomputing.com/downloads/ewido-setup_4.0.0.172c.exe

Update it and run a complete scan.

Post logs back and let us know if you got it.

Regards.

Erik

 

[Frank4d]

According to a few Google searches the fix is to disable System Restore (which will dump your system restore points and files), then re-enable it.

 

[BluByU]

Thanks for the advice. I already have Spysweeper installed (bought it over a year ago) and it also says the system is clean. I turned off and on system restore as was suggested by Frank4d. I think I'll start with the simplest thing first, and then try the other procedures if this doesn't work. Again, thanks so very much for the advice! I'll let you know if this fixes the problem.

 

[BluByU]

I'll try the simplest thing first. I turned off and on the system restore. I'll let everyone know if this fixes the problem. Thanks so much for the advice!

 

[pechenegs]

Those files will be system restore files!

Member of ASAP Alliance of Security Analysis Professionals

under the name khazars

 

[BluByU]

The turning off/on of the system restore seems to have solved the problem. No more NAV pop-ups about this issue. I wish I could give you guys the $39.95 that Symantec charged me. You deserve it, they don't.