NortonUtilities 15\RMScrn.exe Quarantined due to trojan.dorkbot.ed

[DanM1000]

When  ran MW it detected Trojan.dorkbot.ed in C:\PrgroamFiles(x86)Norton Utilities 15\RMScrn.exe.

MW quarantined the file so not Norton Utilities won't run anymore.

I then deleted and reinstalled Norton Utilities and MWbytes quarantined it again.

I also ran MW Anti Rootkit and it found nothing, also ran Norton internet Security Full scan and it didn't find anything.

 

I seems to be in a lop here.  Any help 2would be appreciated.

 

It may be unrelated, but I've also had problems with iTunes, right now it won't read DVDs.  I reinstalled it and the problem returned there too.

 

I am on a Windows 7 computer.

Thanks,

Dan

 

 

[MrCharlie]

Welcome to the forum.

It sounds like it's a false positive (FP). Can you find that file and upload it to Virus Total for a free scan.
Let me know the results, just copy back the URL.

C:\PrgroamFiles(x86)Norton Utilities 15\RMScrn.exe

https://www.virustotal.com/

 

FYI: you can always restore files that MB quarantines and /or add them to MB ignore list. 

----------------

If you having trouble doing that, just zip that file up and attach it.

MrC

[DanM1000]

Not sure why, but this forum isn't letting my paste into the topic window, even after I allowed it access to my clipboard.  (Ideas?  I'm in IE11)

 

It came back as probably harmless 1/50.

 

Dan

[MrCharlie]

Can you attach the file?

 

To attach a log:

 

Bottom right corner of this page.

 

New window that comes up.

 

MrC

[DanM1000]

Here is the link to the results

[MrCharlie]

No link in your post, MrC

[DanM1000]

Sorry, let me try that again.

scanresults.txt

[MrCharlie]

It seems like it's not detected any more by Malwarebytes.

MrC

[DanM1000]

Yeah.  I just ran another scan.  This time it didn't quarantine the file.

 

Thank you for looking into this.

Dan

[MrCharlie]

OK.....Take Care MrC

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!