I hope that I am not stating the obvious but I think nortonav.exe is the Norton Anti Virus executable. I don't know if it is Behaving As Designed (BAD) or it is itself infected with a virus. That should not be too difficult to check. ---------- Original Message ---------------------------------- From: Jason Sievert <jsievert at jsievert.net> Reply-To: TCLUG Mailing List <tclug-list at mn-linux.org> Date: Tue, 06 Jul 2004 15:01:18 -0500 >Hey guys, my company is getting blasted with a virus that I can find >nothing about. None of our latests virus scanners can seem to find it. > It looks to be a single file, nortonav.exe, that is run at startup via >the registry in windows. It is choking our network to the point that >nothing can be done at this point. The hardest hit seem to be windows >2000. All of the computers do have the latest patches as of today. It >does show up under the task manager as nortonav.exe. I am still trying >to figure out how it gets in and what the traffic looks like. Has >anybody seen anything like this??? > >_______________________________________________ >TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >Help beta test TCLUG's potential new home: http://plone.mn-linux.org >Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery >tclug-list at mn-linux.org >https://mailman.real-time.com/mailman/listinfo/tclug-list > ________________________________________________________________ Sent via the WebMail system at mail.eworld3.net _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota Help beta test TCLUG's potential new home: http://plone.mn-linux.org Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list