• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Undetected Virus?

Is there a virus called torpig which cannot be detected by Norton?

Labels: Virus Scan

Replies

Kudos0

Re: Undetected Virus?

It is a 'Bot' that steals sensitive information and Norton Security has been detecting it since 2005 that I'm aware of. Its been out a long time now

DELL XPS 8900 / I7-6700 / 64bit / 16GB RAM Win7 Pro - Norton Security
Kudos0

Re: Undetected Virus?

Hello Jack, please read this article from the Malwarebytes forums. Download and run the free Malwarebytes from here, if you believe you are infected this should remove the rootkit that is associated with torpig and its botnet.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Undetected Virus?

Hi Jackdon:

Torpig is just one of names given to a family of backdoor trojans that were prevalent about a decade ago.  According to the Wikipedia article Torpig, some of the alternate names for this botnet are Anserin or Sinowal and they can spread to systems compromised by the Mebroot rootkit.

I'm not certain, but I believe Symantec should detect most common variants as Trojan.Anserin (see https://www.symantec.com/security-center/writeup/2005-112315-0608-99); the rootkit should be detected as Trojan.Mebroot (see https://www.symantec.com/security-center/writeup/2008-010718-3448-99).

If you are concerned that you might be infected by a newer variant of Torpig that is not detected by a Norton Full System Scan (Security | Scans | Scans and Tasks | Full System Scan), run a second-opinion scan with the free Malwarebytes scanner (https://www.malwarebytes.com/) to see if it can find any threats missed by Norton.  See the instructions in BevStr's thread MyWay Search if you haven't used Malwarebytes before, and be sure to disable the 14-day trial of Malwarebytes' real-time protection (Settings | Account | Deactivate Premium Trial) before starting your initial Threat Scan.

EDIT:

Sorry, I didn't realize SoulAsylum had already suggested a Malwarebytes scan before I posted my reply.
-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.9.0 * NS v22.15.1.8 * Malwarebytes v3.5.1

Kudos0

Re: Undetected Virus?

Many thanks to all who answered.  I did find an issue which is now cleared.

Kudos0

Re: Undetected Virus?

Jack thanks for the feedback. If you believe the thread has been solved please select the post you feel was the solution. Others may then be able to see the solution in the event they have a similar issue. Have a great day.

Cheers

"From DOS to Windows10 what a journey it has been" / MS Certified Professional / Windows 10 Home / Professional x 64 version 1903 / build 18362.239 / N360 Deluxe 22.17.3.50 / Norton Core v.282 on Android 2.00
Kudos0

Re: Undetected Virus?

Thanks for all the answers. They all contributed in their own way.  Turns out it was a red herring as part of a scam attempt on my bank account which the answers helped to avert. Thanks again

Kudos0

Re: Undetected Virus?

To remove torpig virus I suggest you Download and run Norton Power Eraser.Norton Power Eraser is easy to download, and scans your computer quickly to detect the most aggressive computer viruses.

Kudos1 Stats

Re: Undetected Virus?

samirajoiy:

To remove torpig virus I suggest you Download and run Norton Power Eraser.Norton Power Eraser is easy to download, and scans your computer quickly to detect the most aggressive computer viruses.

NPE does not detect malware (that is what Norton Security is for), it presents you with a list of files that could be malware.  It is meant to be run when your Norton program does not detect anything malicious but you still suspect that something may be acting suspiciously on your PC.  If there doesn't appear to be anything wrong, the results returned by NPE will almost always be safe files that belong to applications on your system.  NPE doesn't tell you much about a file because it really doesn't know much about the files it presents - that's the whole point, if Norton knew whether the file was actually malicious or not you would not have to run NPE, as Norton Security would catch it if it was malicious and NPE would not flag it if it was a known good file. 

https://community.norton.com/en/comment/7865241#comment-7865241 

https://community.norton.com/en/comment/7954241#comment-7954241

This thread is closed from further comment. Please visit the forum to start a new thread.