Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251

Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
Strange trojan (?) Backdoor.Graybird
Strange trojan (?) Backdoor.Graybird

Strange trojan (?) Backdoor.Graybird
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Strange trojan (?) Backdoor.Graybird developmental2 09-16-2005
Posted by Malcolm on September 17, 2005, 2:00 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Latest Liveupdate from Norton has fixed this problem on my machine.


Posted by Charles Eaves on September 17, 2005, 10:59 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have to agree.
I am in the same boat like everyone else that has posted.
I set my computer back before the last update from norton.
The greybird problem went away.
I just updated my NAV defs today (different file size from the one the other
day).
I restarted my computer (I didn't need to but I did) and no virus message
shows.
Whenever I start or restart my computer days ago, I would always get the
greybird "detected" popup.
Everything is fine now.
Something is going on, Spy Sweeper and Symantec sending updates days after
their last update.
Hmmm!
Just a thought!

> Latest Liveupdate from Norton has fixed this problem on my machine.
>



Posted by Diane on September 17, 2005, 8:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> We ran into the problem this afternoon and it looks like it is realated
> to Spy Sweeper and the latest update. We're on the phone with support
> and they know about the problem. I'm not sure if it is a false
> positive or what. I hope that helps.
>

I posted earlier this am with regard to this issue; the only time I get a
notice from NAV about this trojan is when I open Webroot's Spy Sweeper.

I did the entire Norton removal procedure and when it came time to do the
last step and edit the registry, there was nothing to edit....go figure.

I am contacting Webroot. This shouldn't be happening. The file allegedly
afftected on my PC is :C\WINDOWS\temp\mc22.tmp. My pc is running fine, btw.

D.



Posted by Ian Kenefick on September 17, 2005, 8:37 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sat, 17 Sep 2005 08:18:36 -0400, "Diane"

>I posted earlier this am with regard to this issue; the only time I get a
>notice from NAV about this trojan is when I open Webroot's Spy Sweeper.
>
>I did the entire Norton removal procedure and when it came time to do the
>last step and edit the registry, there was nothing to edit....go figure.
>
>I am contacting Webroot. This shouldn't be happening. The file allegedly
>afftected on my PC is :C\WINDOWS\temp\mc22.tmp. My pc is running fine, btw.

I wouldnt worry about it. Its more of an annoyance than anything.
Sounds like a quarentined file. A piece of malware already removed by
Spysweeper. What seems to be happening is Norton is correctly
identifying malware located within SPysweeper quarentine. Just disable
norton termporarily and purge(delete) the entire spyspweeper
quarentine.


--
Ian Kenefick
http://www.ik-cs.com
http://antivirus.ik-cs.com

Posted by =?Utf-8?B?YnBhX3JldGlyZWQ=?= on September 18, 2005, 12:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

"Ian Kenefick" wrote:
>
> I wouldnt worry about it. Its more of an annoyance than anything.
> Sounds like a quarentined file. A piece of malware already removed by
> Spysweeper. What seems to be happening is Norton is correctly
> identifying malware located within SPysweeper quarentine. Just disable
> norton termporarily and purge(delete) the entire spyspweeper
> quarentine.
>
>
> --
> Ian Kenefick
> http://www.ik-cs.com
> http://antivirus.ik-cs.com
>

Wow -- 6 sentences with 7 poor assessments/recommendations. Yes it is/was
annoying; but that really couldn't be determined until the true culprit (NAV)
was identified and fixed.

As noted above by Malcolm, Norton has indeed issued (9/17) a virus
definition update which has apparently resolved the 'falsely positive' NAV
identification of a SpySweeper startup file. Both of my PCs are now OK.



Similar ThreadsPosted
backdoor.trojan April 25, 2006, 1:43 pm
Backdoor Trojan? March 2, 2007, 11:12 am
irc backdoor trojan May 9, 2008, 8:28 am
trojan horse backdoor irc/sdbot.myx December 15, 2005, 5:29 pm
trojan horse IRC/backdoor.sdbot.myx December 15, 2005, 5:35 pm
Trojan horse BackDoor.Generic3.EKW September 9, 2006, 10:14 pm
Graybird July 10, 2005, 10:25 am
Strange one October 17, 2007, 12:39 am
Strange virus October 3, 2006, 9:16 pm
Strange AVG behavior. March 31, 2007, 3:41 pm

The site map in XML format XML site map

Contact Us | Privacy Policy