GRAYBIRD VIRUS/TROJAN DETECTED

  rotormota 18:47 17 Sep 2005
Locked

Hi,

Norton detected the Graybird nasty on my PC this morning. It apparently activates on boot up which is exactly when the alert appeared.

I don't know how it got in because I have numerous spy protection progs running with the full blown Norton IS being the main barrier.

This is quite a malicious bug & my main concern is how long it has been there. I hope not to long as a full NAV scan was performed last night which detected nothing.

In addition XoftSpy has detected this in my registry which is to do with Windows Updates:
software\microsoft\windows\current version\windowsupdate\autoupdate\auooptions\1:@:1

Should I delete it/

regards,
A

  GaT7 19:02 17 Sep 2005

Try an online scan & removal at click here.

Another user has been affected recently but he/she hasn't posted again click here.

The Symantec site mentions several variants of Graybird - click here, type graybird in the box & press the search button. G

  playmofire 08:51 19 Sep 2005

I've just updated my thread on this.

  Chegs ® 12:34 19 Sep 2005

There are a number of threads on the PCA site stating that Norton AV is detecting this trojan on startup. However this could well be a problem with Norton, and you do not have this thing at all. It is seeing other spyware removers as this virus. Certainly Webroot Spysweeper and Spywareguard are two, and I suspect ewido as well. There could be more. click here for more info.


From Here click here=

  VoG II 12:35 19 Sep 2005
  rotormota 17:15 19 Sep 2005

Thanks folks. A relief in a way.

I have the very latest NAV updates now & possibly this has corrected the situation.

That said, what do I do with the quarantined file which is probably OK?

In addition does anyone know what that registry string could be which XSoft has found...nice or nasty?

Many thanks,
Regards,
A

  GaT7 19:38 19 Sep 2005

I use WinXP Pro & this is a picture of how SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\AUOptions (right pane) & it's DWord value looks like. What does yours say?

In Control Panel\Automatic Updates I have 'Notify me but don't....install them' selected. G

  GaT7 19:39 19 Sep 2005

I use WinXP Pro & this is a picture of how SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\AUOptions (right pane) & it's DWord value looks like click here. What does yours say?

In Control Panel\Automatic Updates I have 'Notify me but don't....install them' selected. G

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Xiaomi Mi Mix 2 review

What went wrong at the Designs of the Year 2017

iPhone X news: Release date, price, new features & specs

Comment utiliser Live Photos ?