Norton seems to miss these

[stevie45]

Hi, i opened "frontpage" yesterday and immediately some random words started to appear on the new page that i created, so i suspect it is a trojn horse of some sort. i use norton internet security, and did a full check (as i do every week) and it found nothing. i then downloaded a programme called "anti trojan shield" and this found two items:

Virus "VAGR40.EdtSrv4" detected
Virus "Hanuman.hanumanserver" detected

i can find nothing on these on the symantec website, anyone know why, and what action i should take?

Thanks

 

[swertel]

Submit those two items to Symantec, assuming "anti trojan shield" quarantined them properly for you to be able to submit them.

Or, just email Symantec and ask "Hey! What's up?".

 

[stevie45]

Thanks swertel,

Unfortunately I cant quarantine them as i only downloaded a free version, which doesnt allow that functionality. Also, I know it sounds stupid, but I couldnt find an email adress on the symantec website, only the option to phone them at a very expensive rate!

Thanks

 

[michigan]

Hi stevie45 -

The VARG40 is actually "VagrNocker" - a remote administration tool.

Haven't personally seen that one before, but this link should help you out:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.vagrnocker.html

Good Luck.