Mailer Virus

[Wildfire]

I have some sort of mailer Virus. Norton hasn't found it, and neither has adaware, but Norton keeps blocking outgoing mails. Any ideas?

[Stealth69]

Is it actually blocking it ? ? ? Does it have a spam filter built in to it ? ? ?

[roadsweeper]

Wildfire said:

I have some sort of mailer Virus. Norton hasn't found it, and neither has adaware, but Norton keeps blocking outgoing mails. Any ideas?

Did you try the anti-spyware products I propvided a link to on your other thread?

[Mrs Fish]

James here:

I had a hidden trojan which was mailing through it's own smtp engine with an advanced key logger. Norton Corporate, AVG, Free AV, Sptbot, Ad aware all didn't find it. In the end I flattened it and rebuilt. Talking to symantec they said oh yes probebly a new virus. I'd identified what processes it used etc but needed help to identify the dll and the file.

Symantec were USELESS even with corporate gold support they couldn't put me through to someboby who would help identify it. I am strongly thinking of moving ALL the corporate protection away from them next year.

[Wildfire]

Thanks Roadsweeper, yep tried a few of those that allowed me to, didn't pick up anything aside from cookies.

Cheers James. Yep that sounds about right. It's even gone round Norton and added it's spam list to Norton's approved emails.

I seem to have gotten rid of it as nothing seems to be sending out any more, but I had to remove a load of things from the registry and from windowssystem 32

Unfortunately now I can't get Outlook express to work. Basically it tries to connect to the mail host, and then just keeps on trying to connect. Any ideas? Have I removed somthing I shouldn't have?? It starts up and everything.

Also every time I ope IE, it comes up and says "cannot find file:///c:windows/secure32.html" I klnow I had to remove that. Any ideas??

Thanks to all that have helped so far.

[annodomini2]

Try AVG antivirus, its free AVG Free

PS Norton is crap!

use the above ad-adware personal (also free)

And a decent firewall, e.g. Zone alarm, Keiro

>> Edited by annodomini2 on Saturday 17th December 09:57

[BliarOut]

Wildfire said:

Thanks Roadsweeper, yep tried a few of those that allowed me to, didn't pick up anything aside from cookies. Cheers James. Yep that sounds about right. It's even gone round Norton and added it's spam list to Norton's approved emails. I seem to have gotten rid of it as nothing seems to be sending out any more, but I had to remove a load of things from the registry and from windowssystem 32 Unfortunately now I can't get Outlook express to work. Basically it tries to connect to the mail host, and then just keeps on trying to connect. Any ideas? Have I removed somthing I shouldn't have?? It starts up and everything. Also every time I ope IE, it comes up and says "cannot find file:///c:windows/secure32.html" I klnow I had to remove that. Any ideas?? Thanks to all that have helped so far.

Just a guess, but get HijackThis and remove the BHO that references secure32.html