PDA

View Full Version : trojan.small/tracking cookies


gunner49
July 10th, 2006, 03:13 AM
Hi all

I am having some trouble! When doing a complete scan Ewido finds some 2000 and more tracking cookies like this one here:
:mozilla.101:C:\RECYCLER\NPROTECT\00000039. -> TrackingCookie.2o7 : Error during cleaning

and also this trojan:
C:\RECYCLER\NPROTECT\00000024. -> Trojan.Small : Cleaned with backup (quarantined). Going into quarantine nothing is found!

No matter what I select how to treat (delete, quarantine) it gives me "error during cleaning/quarantine" and when I re-scan the cookies and this trojan are found again! They all seem to be in the C:\RECYCLER\NPROTECT\ path and all the cookies have got this prefix: ":mozilla."

Any help would be much appreciated! Thanks

karl.ewido
July 10th, 2006, 05:06 AM
Please update your Norton software and then deactivate the NProtect function of this Norton Software. Now the ewido software should be able to remove these detected threats.

gunner49
July 10th, 2006, 05:27 AM
-{ Quote: "Please update your Norton software and then deactivate the NProtect function of this Norton Software. Now the ewido software should be able to remove these detected threats." }-

Thanks for reply mate...
My Norton is up to date and if the Nprotect function is the one associated with the Recycle bin I already did that as well from Recycle Bin properties but still to no avail

MikeW2
July 10th, 2006, 06:03 AM
Please take a look at this info. As you may well find you have this trogan, not to be confused with Symantecs old protect folder

http://www.sophos.com/security/analyses/w32rbotww.html

gunner49
July 10th, 2006, 06:31 AM
Thanks for the info MikeW2, but I dont think its my case. I searched the registry for "npprotect" but didnt find any instances of that file whatsoever.
I am now trying to delete the files in c:\recycler\nprotect manually and see what happens.

This is driving me mad!

MikeW2
July 10th, 2006, 06:51 AM
Good luck

gunner49
July 10th, 2006, 06:57 AM
I'm using norton 2003. My issue is more the amount of cookies that ewido is finding than norton. I can boot norton away. My concern are the cookies and the trojan which Ad-Aware finds none of them!

gunner49
July 10th, 2006, 08:02 AM
deleted manually all files from the C:\RECYCLER\NPROTECT folder, did a scan and finally nothing found...hope i'm sorted now;)