Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

W32.Scrimge.A????

Status
Not open for further replies.

MarcLodge

Programmer
Feb 26, 2002
1,886
GB
A friend of mine has a laptop that one of his sons clicked on a messenger link that was not from whom it thought. It infected his machine with a virus that Norton detected as W32.Scrimge.A. He followed the procedures described on the website and removed it.

But......

When he now connects to his wireless network, with no programs at all open, Norton starts showing loads of envelopes in the area next to the systray as if it is sending out loads of emails. He turns off the wireless connection, and after a little while gets message after message from Norton saying that the mail couldn't be sent. The mail is usually of the variety of 'increase the size of your.....'. The recipients of the mail are not people that he knows and are not in his address book.

Now this is where is gets interesting......

He has run a full virus check in safe mode and out of safe mode and nothing is detected. He has emptied temporary internet files, recycle bin, and run Spybot and ad-aware, with nothing particular found. Still the problem exists.

Finally, it gets very very interesting.......

I have brought the machine around to my house and turned on the wireless connection and it is fine. No messages sent, nothing!!!

His wireless router is different from mine and assigns a different default ip address to the gateway, but I've looked through his registry searching for something like that to no avail.

Has anybody got any clues as what to do next? He is obviously infected with something, but Norton is not recognising it. And has anybody ever come across a virus that either is able to infect a router (didn't think that was possible) or that is router specific?

Regards,

Marc
 
Forgot to say that the version of Norton is Norton Internet Security Version 15.0.0.60 and is fully up to date.
 
I have done some further digging and the virus is a trojan named w32.tiny.abk

It is identified by Spybot, but it does not clear it.

I shall open a new thread asking for help with that trojan.

Please consider this hread closed.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top