Expert: Lorry - 6/23/2008

Question
QUESTION: so now i have a problem on my computer...My OS is Windows XP... every 10 seconds, and i mean literally 10 seconds i counted, i get this warning...its a notice from Symantec... saying:  
"Auto-Protect has blocked W32.Rontokbro@mm as a security risk. Your computer is secure."

its really annoying and is seriously interrupting me from using my computer...i checked for the virus but the computer doesn't seem to have is and i've run several virus scans and it would go away for a day or two but come right back...i hope you can help me

Cat

ANSWER: Hi Cat,

It sounds like NAV - Symantec is doing it's job by alerting you that it has blocked this virus. Evidently you are getting messages that include this threat, check out the following from Symantec for more details:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&

To verify that this threat is off the computer or at least in Quarantine, follow the directions given at the following site for removal:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&

Regarding the warnings, I would rather get the warnings instead of the virus anyday, even though they can be a royal pain. Can you find out which email the virus is coming in? If yes and you are using Outlook Express, you could make a message rule not to accept messages from that address again.

Hope this helps!
Lorry





---------- FOLLOW-UP ----------

QUESTION: the thing is that i'm not getting it from mail and i'm sure of that...i'm using firefox and i down open any mail from anyone i don't know...and i have not gotten any mail in the last week to open any way but i'm still getting the warning ... every 10 seconds that i've been protected!...its really annoying...i can't even type this message cuz every 10 sec i have to click to re activate the browser ...i want it to stop telling me i've been protected be cause it's im possible to get any work done with it...

one thing...i am on a net work...could the virus be coming from the other computer?...i mean they are getting the same message as well.

Answer
Hi Cat,

Viruses can be spread throughout a network. Have everyone on the network run the free scan from Symantec to see if there are any other threats involved. Regarding W32.Rontokbro@mm, they should follow the directions given at:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-092311-2608-99&

Hope this helps!
Lorry