Virus Question

[Maggotry]

I use NAV 2002. My wife was surfing some wallpaper sites today and after clicking on what she thought was a link to a site (she thinks it said Cacoonia.com), NAV came up and said the computer had a virus. It identified it as VBS.Haptime.A in the file cacoonia.htm. OK. That's the background. Now the question:

I've ran a full virus scan, but NAV detects nothing. I read SARC for a description of the virus. SARC says certain entries will be made in the registry when the virus is executed. I used regedit to search for the keys and they're not there. So I'm thinking the virus is present on the system in the file cacoonia.htm, but the virus was not executed because NAV denied access to it. Does this make sense? Opinions?

I didn't know if this fit Software or Technical Support, so I posted here.

 

[minendo]

<< So I'm thinking the virus is present on the system in the file cacoonia.htm, but the virus was not executed because NAV denied access to it. Does this make sense? Opinions? >>


Yes this makes sense. The script is probably still located on your system but since NAV denied access to it it was not executed. What I would suggest doing is finding that file and deleting it. It may or may not be an easy find because it could be located in a hidden folder in Temporary Internet Files. I had a similar virus attack and it ended up being located in a hidden folder. It took me a while to figure that out, but I did finally delete the file.

 

[Maggotry]

<< It may or may not be an easy find because it could be located in a hidden folder in Temporary Internet Files >>


That's exactly where NAV's report shows the file to be. I'll just go to explorer then and "Show Hidden" then delete the little ah heck.

Thanks.