Ok, so I was searching for runescape videos in google when I saw this video about a runescape privite server and I thought I wanna see how it looked like. So, I clicked on the link and click download. So, I saved it in my documents.

 

 

 

I know I was SOOOOOOOO stupid, I mean how can a video be only 100kb????

 

 

 

Anyway, I got a message from Norton Antivirus saying that they found a virus called info stealer. Then, I got this message from norton saying action taken=access denied and action taken=repair failed.

 

 

 

Ok, I know what access denied means but I donno what repair failed meant. Did it mean that the virus is still in my computer and they can't get rid of it? There was nothing in the quarantined section and they didn't say they deleted it. So, I did a full virus scan on my computer and deleted all my cookies, temp internet files and history. The virus scan told me that my computer was clean.

 

 

 

But, I still had some application in my documents. It's size is 0kb. When I tried deleting it, they said that it was in use. So, I keep on trying and got bored, so I closed windows explorer. Then, they manage to put it in the recycle bin and I got rid of the 0kb file.

 

 

 

I haven't logged into my RS account or my email or anything. Is the viruz still there??? I searched for the viruz name and I got this:

 

 

 

--------------------------------------

 

Discovered: December 27, 1999

 

Also Known As: PWSteal.Trojan

 

Type: Trojan Horse

 

Infection Length: Varies.

 

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

 

 

 

Infostealer.Trojan is a generic detection for various Trojan horse programs that attempt to steal login details and passwords.

 

 

 

ProtectionVirus Definitions (Intelligent Updater) December 27, 1999

 

Threat AssesmentWildWild Level: Low

 

Number of Infections: 0 - 49

 

Number of Sites: 0 - 2

 

Geographical Distribution: Low

 

Threat Containment: Easy

 

Removal: Easy

 

DamageDamage Level: Low

 

Payload: Steals passwords.

 

DistributionDistribution Level: Low

 

-----------------------------------------

 

 

 

This is scary! What to I do? I want to check my email and go on some forums. I only accessed this forum for help.

 

 

 

BTW, sorry if I posted in the wrong board.

Have you tried manually removing it? I doubt just deleting it will work. Run a few more scans, maybe it's already gone.

I can't find it, I don't know where it went too. :|

try using another anti-virus program.

0KB means your AV deleted or cleaned it, most likely the latter. If it was a 100kb virus, and nothing else was bundled with it, then 0kb would be left... I've had this happen a few times with mcafee when I manually go to the file that won't let me delete it. Just go into safe mode and delete it, though it's no longer dangerous.

 

 

 

If you want, go ahead and post a HJT log.

Also theres a function in hijack this that lets you delete a file upon reboot.

System restore.

 

 

 

 

 

 

 

http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx