• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Norton blocks intrusion attempt but doesn't find Trojan

My laptop gets frequent pop-ups saying Norton blocked an intrusion attempt by Trojan.Zlob.Q, and a scan then detects a Trojan and removes some files; but the next day, I get the same pop-up. How do I get this Trojan off my computer? In addition to Norton Security, I've tried Norton Power Eraser and Sophos.

Replies

Kudos0

Re: Norton blocks intrusion attempt but doesn't find Trojan

tfox37380 The official solution is here: https://us.norton.com/online-threats/trojan.zlob.q-2016-020300-4629-99-writeup.html

However alternatively I suggest downloading and running Malwarebytes to remove:

https://www.malwarebytes.com/

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Norton blocks intrusion attempt but doesn't find Trojan

Neither Malwarebytes nor the approved solution solved my problem. When I get a blocked intrusion attempt and then run a Norton scan, it always eliminates about 9-10 ".dat" files in this directory : c:\programdata\intel\sur\williamette\inteldata. On the laptop in question, there are 8732 files in this directory, going back about 12 months. It seems there are about 15 files created every day. I checked my other pc and there are no files in this directory.

Do you know what this directory is? My guess the actual Trojan is somewhere else on my laptop, but is creating these files every day. Why can't Norton find the actual Trojan? The scans say these 9-10 files found are the trojan and removes them, but then the next day, I get another blocked intrusion notice. The files removed every time are different numbers, always a higher number (ex: p004266.dat). Let me know if sending the directory would help (1.62 Gb).

Kudos0

Re: Norton blocks intrusion attempt but doesn't find Trojan

Do you have this program installed "Intel Driver Update Utility"? If so uninstall it. All those files should get removed along with it. Re-run Malwarebytes a second time. Delete what it quarantines. Let us know how you made out with this if you would.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Accepted Solution
Kudos1 Stats

Re: Norton blocks intrusion attempt but doesn't find Trojan

Thanks for your reply.

I checked control panel/programs and features, and IDUU wasn't there.

I think I found what has been causing the Norton blocked intrusion messages on my laptop. It actually turns out that it appears to be a "false positive" associated with the Intel Driver Update Utility that I had installed at one time. Even though I had removed that from my computer, there was a piece of it that was left and it generated "xxx.dat" files every day. Norton thought they were a Trojan.

I then looked in Windows Explorer and found c:/program files/Intel/SUR/williamette. That is the folder that contains the sub-program that generates the "xxx.dat" files that Norton tags as a Trojan. After I deleted that folder, I haven't had any more blocked intrusion alerts for the Trojan.Zlob.Q. And the .dat files were over 1.5 Gb, so I cleared some space on my hard drive when I deleted them.

Kudos0

Re: Norton blocks intrusion attempt but doesn't find Trojan

Indeed that was my suggestion for your solution. Glad it worked. Please mark the thread as solved if you'd be so kind so others may see the solution. Glad we could assist.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00

This thread is closed from further comment. Please visit the forum to start a new thread.