Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

Estratokoko

2 Posts

8862

January 25th, 2008 01:00

Help with Trojan-Spy.HTML.Smitfraud.c, Phish-BankFraud.eml.a , Trj/Citifraud.A, generic5

I have norton antivirus, it detected some trojan horse called Trojan-Spy.HTML.Smitfraud.c [Kaspersky], Phish-BankFraud.eml.a [McAfee], Trj/Citifraud.A [Panda Software], generic5 [AVG] I read all posts i could find about this on the internet, they all describe a blue screen with a IE crash error, some auto downloaded things and no desktop... things like that. The program that is "infected, " is a .exe application called game_maker I use it a lot and now i can't because the Norton has it on quarantine The program used to work fine, never had any problems, never tried to connect to internet, it just got deleted some day by the anti virus... I have none of the problems described on the other posts, checked the run on startup applications... none damaged, and i have no suspicious processes running... anyway the Norton still says that the .exe application is infected and I can't run mi Game maker because the application gets deleted by the Norton every time I unzip it.... Could anyone help me? I really need to repair that application, But I'm starting to believe it isn't even infected I use Windows XP SP2+ a pack called Vista inspirat 2+ a program called deskspace to have a cube with 6 desktops , I use Firefox It does not matter if i remove it from quarantine, the anti virus won't let me run the aplication anymore...

Message Edited by Estratokoko on 01-24-2008 10:04 PM

ky331

3 Apprentice

 • 

15.5K Posts

January 25th, 2008 11:00

It would appear that either Norton is guilty of generating a "false positive" (since you've been using the game .exe file without incident for a while), or else something "tampered" with [and infected] that file.
 
As a first step, you should contact Symantec/Norton [as well as the games manufacturer/distributor] to alert them to the specifics of your situation, and have them determine whether or not it's simply a false positive.   if it is, they can update their definitions, after which, you'll be able to use the game again.

Estratokoko

2 Posts

January 26th, 2008 01:00

Thx for your help the Guy from Norton told me that he couldn't know if it was an error fron the program, but he told me how to exclude it so the program does not get deleted... it worked, and i still see no anomalies in the program, no virus, nothing Thx again :)

ky331

3 Apprentice

 • 

15.5K Posts

January 26th, 2008 14:00

as long as you've found a way to "bypass" your Norton, and access the file it was removing, you can try uploading it, for analysis, to either [or both] of the following websites:
 
 
 
if these report it as being clean, then you can reasonably assume Norton was generating a false positive.  
but if these find any problems, you can post the results here [copy them exactly], to see what further steps someone might suggest.

Was this post helpful?

View All

No Events found!

Top