NAV detected IFrame.Exploit and won't delete/repair

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

Dear Users,

Just a minute ago, NAV (of my N.I.S. 2004 program) detected the virus 'iFrame.Exploit', but would not repair, or remove it, so I went to Symantec's site and checked up on this, using http://securityresponse.symantec.com/av...ploit.html

It gives you the removal instructions...http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.

and they tell me that I shouldn't have had the virus in the first place as I:

*Am running XP
*Have IE version 6.0.2800.1106.xpsp2.030422-1633

and they say it is something to do with a 'mime' function which IE 6 eliminates.

So, now I am stuck. I don't know how to remove the file. The only thing I have done is a clean-up i.e. deleted Temporary Internet Files from my browser, cookies, and history, but as NAV cannot access it I am afraid it is still romaing round my system!

Cops pls help as I am worried!

Thank you for reading

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

Dear Users,

Just a minute ago, NAV (of my N.I.S. 2004 program) detected the virus 'iFrame.Exploit', but would not repair, or remove it, so I went to Symantec's site and checked up on this, using http://securityresponse.symantec.com/av...ploit.html

It gives you the removal instructions...http://www.microsoft.com/technet/security/bulletin/MS01-020.asp.

and they tell me that I shouldn't have had the virus in the first place as I:

*Am running XP
*Have IE version 6.0.2800.1106.xpsp2.030422-1633

and they say it is something to do with a 'mime' function which IE 6 eliminates.

So, now I am stuck. I don't know how to remove the file. The only thing I have done is a clean-up i.e. deleted Temporary Internet Files from my browser, cookies, and history, but as NAV cannot access it I am afraid it is still romaing round my system!

Cops pls help as I am worried!

Thank you for reading

acidic_fusion · Cadet Joined: Mar 26, 2004 Posts: 5 Location: Singapore

oooh..paranoia...serious.... did you try deleting stuff in the TEMP folder and the Recent folder(hidden file in the Windows folder) that will help.... just don't delete the one that says sys.reg(that what i did and it took me a long time to get a replacement) so good luck Smile

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

I am not sure about doing this at the mo. without a step-by-step, as I have done this before and I think this resulted in NAV giving me a message saying it had been 'tampered' and to uninstall and reinstall, although I am told that Symantec have released a patch to correct this which downloads when you run liveupdate, whch I do frequently.

I just don't understand how I can actually get rid if this completely, as NAV won't repair, or delete, and in the article, it sais I shouldn't have even got htis with my version of Internet Explorer.

And I don't think I am being paranoid, as I am experiencing browser slowness, general PC slowness, and am worried that (even though after contacting Symantec, and having them telling me that after reinstalling, which I have done, and updating, which I have, and do) I have viruses which N.I.S. 2004 is not detecting.

Please help!

k027 · Posted: Fri Mar 26, 2004 11:48 am Post subject:

Hello keiramackenzie,

Try getting an online virus scan:

http://housecall.antivirus.com/ Smile

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

Thanks. I've done several online scans, which say I am clean of viruses, and the file was a '.tmp. file, which I looked up, and can either be a 'temporary internet file' or some sort of Norton file.

Only problem now being that I can't find it manually, or by searching, so it must be either gone, which I don't think so, or stealth like.

I will continue to find out about it

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

Thanks. I've done several online scans, which say I am clean of viruses, and the file was a '.tmp. file, which I looked up, and can either be a 'temporary internet file' or some sort of Norton file.

Only problem now being that I can't find it manually, or by searching, so it must be either gone, which I don't think so, or stealth like.

I will continue to find out about it

keiramackenzie · Trooper Joined: Mar 08, 2004 Posts: 10 Location: Uk

Thanks. I've done several online scans, which say I am clean of viruses, and the file was a '.tmp. file, which I looked up, and can either be a 'temporary internet file' or some sort of Norton file.

Only problem now being that I can't find it manually, or by searching, so it must be either gone, which I don't think so, or stealth like.

I will continue to find out about it

softpinkpiglet · Cadet Joined: Apr 13, 2004 Posts: 1 Location: Greece

Hi

i wondered if you got any further with this. I have a similar problem. F-secure found the same iframe.exploit virus on my pc and deleted the mailbox file that the virus seemed to be in.

I too went to the MS page and just found out that i should not have this as i run xp and opera (i have ie 6.0.28 too)

Now opera will not download my messages to my mailbox either in case of infection of as my file system is already screwy.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 920 pages served in previous 5 minutes. Page Generation: 0.929 seconds.