Re: Pandex trojan - Norton and AVG fail to remove it

[Adrian C <email@xxxxxxxxxxxx>]

Mortimer wrote:
> Has anyone had problems removing the Pandex trojan from a PC which is 
> infected? This trojan sends spam via a variety of SMTP servers.
>
> A customer has Norton 360 which successfully identifies that it has found 
> Pandex, even during its boot-up checks, and during a virus scan it claims to 
> have removed it and needs a reboot to finalise the process. But after the 
> boot the thing is still there: you can see Norton trapping some of the 
> emails and displaying suitable error messages.

See
<http://www.symantec.com/security_response/writeup.jsp?docid=2007-042001-1448-99&tabid=1>

Or enter 'pandex' in symantec's search page on
<http://www.symantec.com/security_response/>

The technical details page shows the name of files and settings that 
have been added or changed by the trojan. Do these changes exist?

Click the removals tab for removal details - Yes, Symantec products will 
remove it but you have to disable system restore first.

When the time comes, don't renew a subscription to Norton 360. Although 
it has 'caught' the virus, the dumbing down of vital information and 
sense of false security that is given to casual PC users, is IMO 
dangerous. Norton do better products and so do the competition.

Resources here : http://www.getsafeonline.org/

--
Adrian C