Spyware or Worm?

[gizbug]

My outpost firewall has about 300 open ports on this app, nav.exe. Cant find the file on my computer to delete it. Any idea what it is, or what its doing?

 

[CVSiN]

Originally posted by: gizbug
My outpost firewall has about 300 open ports on this app, nav.exe. Cant find the file on my computer to delete it. Any idea what it is, or what its doing?

um NAV.exe is Norton AntiVirus executable...

 

[sao123]

you are infected with a worm. you should reboot in safemode and delete it.
This virus also specifically creates several files in many folders all with random names with NAV in it.
You should search for *NAV*.* and delete all those files too.

 

[Dissipate]

Goooooooooooooooooooooooooogle

 

[daveshel]

Norton AntiVirus.

 

[sao123]

Originally posted by: CVSiN

Originally posted by: gizbug
My outpost firewall has about 300 open ports on this app, nav.exe. Cant find the file on my computer to delete it. Any idea what it is, or what its doing?

um NAV.exe is Norton AntiVirus executable...

🙁

 

[gizbug]

Thanks
Dont have norton on the system.

 

[ohmide]

looks like you do now. Right click and go to properties to verify the Company of the exe

 

[zephyrprime]

Norton antivirus had been called Symantec antivirus for quite a while now. It's executable is now called rtvscan.exe. This other app is probably just posing as norton antivirus.

 

[Appledrop]

may be quickest to just backup all your stuff you want, reinstall windows. if you have that worm, i bet that's not all that is clogging up your system.

 

[AMDZen]

Originally posted by: zephyrprime
Norton antivirus had been called Symantec antivirus for quite a while now. It's executable is now called rtvscan.exe. This other app is probably just posing as norton antivirus.

Ummmm...No, Symantec is the coporate version, otherwise your correct.

 

[pontifex]

Originally posted by: zephyrprime
Norton antivirus had been called Symantec antivirus for quite a while now. It's executable is now called rtvscan.exe. This other app is probably just posing as norton antivirus.

maybe he has a really old version on there?

 

[MaxDepth]

Some virii will replace NAV.exe with a hobled version of the tool so that it can run undetected. Usually you have to boot into safe mode and run an AV tool from CD or diskette to find the virus and deal with it.