PDA

View Full Version : Probably being a complete newbie, but .....



09-12-2001, 03:29 PM
When I ran my Norton virus check, the following files came up as not being inoculated:

QTExtCode.dll, uninst32.exe, rebootnt.exe, tcpip32.dll, vise32ex.dll

I run Norton's every couple of days and these have never come up previously as being uninoculated. I haven't download any new programs or made any changes to the system (as far as I am aware). I am concerned something nasty is afoot. Symatec does not bring up anything when I run a search on these names, so are these files quite normal or am I being a newbie paranoid again.

Any advice would be most appreciated.

System info: Windows ME. Microsoft Works Suite 2001

11-12-2001, 12:56 AM
Hi Jen, tcpip32.dll is normal to have. uninst32.exe looks remarkably like a trojan (called backdoor.tripod)and rebootnt.exe looks equally unfriendly. I can find nothing on rebootnt.exe but seem to remember it being associated with a dialler that can make your phone bill look like a mortgage payment. The remaining files I have no idea on.
I'd suggest checking you have the latest updates from symantec for your anti-virus software and scanning your machine again. Also consider downloading a trojan scanner at http://www.moosoft.com/download.php and see what that shows. Last but not least, get a personal firewall at www.zonelabs.com/products/za/pestpatrol.html (it's free).
Happy hunting!

11-12-2001, 10:13 PM
Thanks Des

I update Norton's every week and run ZoneAlarm already. I downloaded your suggested trojan scanner and I came up squeaky-clean - so good news. Perhaps those files (since deleted) will stay a mystery.

Your advice was much appreciated.

Jen