• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Trojan adclicker

Hello,

Had some system problems yesterday and discovered my computer was infected by "Trojan adclicker".  I'm running full Norton security suite but apparently this got through somehow.  Virus was detected in a back up volume when I ran a full system scan. I also ran Norton Power Eraser and found no other issues.   Anything else I should do at this point?  Surprised that the Norton suite did not catch this.  Also can anyone advise if there may be any risk of unauthorized access to data from this intrusion?

Thanks kindly!

Steve

Replies

Kudos1 Stats

Re: Trojan adclicker

Hi SteveC4,

You stated you are running "Norton Security Suite" (NSS) - just to verify, is this the Comcast version?

You also stated "virus was detected in a back-up volume" - may we ask which backup program you are using?  Is it the one that NSS uses or was it another backup program?

Does this volume (where virus was found) have any identifying info - date, name etc?

Kudos0

Re: Trojan adclicker

Hi,

Yes,  Comcast version of Norton security suite.  I'm running windows 10 back-up.  Identifying info for the virus was as follows:

ffd3b2001e28769aef0bf212b73a54ba6783ed1a

contained in  \....2015-05-29 092751\backup files 39.zip

Trojan.adclicker

Thanks for the help....

Kudos1 Stats

Re: Trojan adclicker

A virus or malware in backup volume is no issue to worry about. backup volume is your system restore volume. If you delete your old restore points then create a new one the file would be gone. What scanner told you that you had a virus? So you ran a full scan with Norton and that is when it was detected? But Norton did catch it. It could also be a false positive. What exactly is the file or software being detected? Do you mean you were running Windows backup and the virus was detected? Do you keep an external hard drive plugged in all the time? The file has been on your computer since 2015. It was something contained in a zip file. It is harmless to your system and most likely a false positive. 

Were you running a full scan with your external hard drive plugged in by chance? If so unplug it. Never leave an external hard drive plugged in 24/7

Kudos0

Re: Trojan adclicker

Thanks!

The virus was found and quarantined by a Norton full system scan.  I've run a full scan about once a month.  I don't know any more about the file other than what was shown in the Norton security log which I added to the post in a previous message.

Appreciate the pointer on deleting restore points.  I'll go ahead and do that.  Presumably this might be something that was on the back-up drive a while ago.  Odd that Norton didn't find it earlier.

Steve

Kudos1 Stats

Re: Trojan adclicker

As I previously stated it could be a false positive. Also was this file found on your external hard drive? Where you running a full scan with your external hard drive plugged it? You should not be scanning an external hard drive also. Hard to tell exactly what happened unless we have full details. Norton did not miss it. A full scan detects more than a quick scan. Norton real time scanning would only alert you when you tried to unzip the file. 

Kudos0

Re: Trojan adclicker

Yes, this was on the external (back-up) hard drive.  I did run a scan with the hard drive connected.....  What would be the preferred approach for scanning the external back-up hard drive?   Thanks,  good to know that Norton would have flagged it when I tried to unzip the file.

Accepted Solution
Kudos1 Stats

Re: Trojan adclicker

You do not need to scan an external hard drive. Also do not leave your external hard drive plugged in while scanning or 24/7. Backup what you need then unplug it. As I already stated it is most likely a false positive. There was never any malware on your system since it was detected in your external hard drive. Do you do system images or just file backups? 

Kudos0

Re: Trojan adclicker

I did a system image months ago. Since then I have been doing just file back-ups.   I'm considering switching back to system images as I just had to re-image the system and it was a pita multi-step process. As the only system image I had was fairly old I had a lot of updating to do once it was re-imaged.

Kudos1 Stats

Re: Trojan adclicker

Good work PSB and sound recommendations - just one comment in regards to:  "backup volume is your system restore volume. If you delete your old restore points then create a new one the file would be gone."

FWIW, if you look at Settings > Antivirus > Scans and Risks Tab > Items to Exclude from Scans > Configure - you will find the \System Volume Information\ is excluded by Default.  This SVI folder is in fact your System Restore Points and is excluded from Scans - thus if there were anything nasty in the Restore Points, they would not be detected by a full system scan.  However, deleting all the Restore Points is a very good practice to avoid the nasty being restored - although Norton should still catch it if/when it were opened. 

SteveC4 - glad you got the help you needed.

Kudos0

Re: Trojan adclicker

Exactly yank. I'm on my Chromebook right now. No security needed. Lol. So I was a little inaccurate. I forgot that Norton excludes system restore points. A system image is something I tell everyone to use. But Windows isn't the best at it. I use Easeus Todo Backup Free.,There is also Aoemi which is free. But always always be sure you make a boot disk.
Kudos0

Re: Trojan adclicker

PSB, no-one is perfect but we do try to research our answers here, so as to give the correct info..............

Windows 10 Home X 64

This thread is closed from further comment. Please visit the forum to start a new thread.