overcautious newbie

Viruses and worms
21

I found and deleted tw0 of the files that David mentioned. The only file I couldn’t find was this one:

C:\Documents and Settings\ \Local Settings\Temp\SymLCSVC.EXE

My computer is working perfectly fine so far (thankfully)

Gail

22

No problems, it’s a temporary one, probably deleted before, while one of your uninstallation procedures.

23

Since avast detected it and you moved it to the chest, it is more than likely gone (this was a double check). Or being in a Temp location if you use any temp files cleaner that to could have removed it.

24

Thanks Again!

25

You’re welcome.

26

me again. I downloaded the latest version of Avast ( I thought I had the latest version!) and did another standard scan and I got another warning about a trojan horse (Win32:Trojan-gen (Other))in:

C:\Windows\Temp\smylcsv1.exe

After successfully moving the file to chest, I tried to find the file but couldn’t under Windows\Temp (even after unhiding all possible files). I have the following questions:

  1. Why can’t I see this file when I go to find it? Did Avast delete it? What type of file is it?

  2. Am I finding this now because I’m now using the newer version of Avast instead of the updated older version? It is not possible that I contracted another virus since my previous scan.

  3. My computer seems to be working fine. Is there case for concern?

thanks (again)

27

Sure, you’ve sent it to Chest and it’s moved to there, nothing rests in your computer besides the file in Chest. Why are you surprised?

28

I should have said “after successfully moving the virus to chest”, I can no longer find that particular file.

29

Most probably, ‘all’ the virus is the infected file itself. Generally, only file infectors (not very common malware nowadays) allow ‘cleaning’ of the infected files. Trojans, adwares, etc. are moved completely to Chest.

30

Ensure you have the latest VPS update because by all accounts version 080705-0 resolved this smylcsv1.exe file as a false positive.

Given the sym start to the file name I suspect you still have a remnant of symantec despit your attempts to remove it.

31

Hi David

Since all(?) of my virus warnings seem to relate to remnants of norton left on my system (even after using the removal tool), might they all be false positives?

32

They might, but that is speculation without testing, but the one I mentioned certainly is.