snuffy,
Als een virus in de temporary internet files content.ie5 zit, dan ben je niet besmet. Het virus verdwijnd vanzelf ook na een tijdje, maar met het legen van je tijdelijke internet bestanden doe je het nog sneller.
Het kan de rest van jouw directories niet besmetten indien het in de content.ie5 directory zit, dus daar hoef je je geen zorgen over te maken.
Wat betreft die dialer MS-Connect: het klopt wat Pieter Arntz zei. Symantec zit het niet als haar taak om deze dialer te verwijderen.
Dit zal veranderen met Norton antivirus 2004 want dan worden alle dialers, spyware en ad-aware ook verwijderd.
Op dit ogenblik zegt Symantec dit:
There are a few things I'd like to clarify about dialers. First of all, a
Dialer is not the same as a Trojan Horse. A Dialer, no matter how annoying,
does not necessarily have Trojan capabilities. A Trojan horse will generally
open up a port so that a hacker can get access to a pc. Other possible uses
for Trojans could be the collection of data, for instance by adding
keylogging capability to the infector file, or to capture passwords from the
system the infector is targeting.
A Dialer will only try to lure customers into dialing in to expensive phone
numbers. The changing of the home page in the browser does not qualify as a
malicious act. Furthermore, most dialers will show a EULA before the
customer downloads the actual file, or it will show a EULA during
installation. As such, the customer can be aware of the goal of the
software, that way, one of the most important definitions of malicious code,
is not met: "to do something without the user knowing it".
In certain cases however, the people creating the dialer will either not
include a EULA, or will add functionality to the dialer that we would
qualify as Trojan-like behaviour. In those cases, we will write virusdefs
for them. The case with E-pay was one of those cases, where our analysis
showed that the file had trojan capabilities noembed>ded.
The line we have to walk with these dialers is a tight one. On one hand,
they are not really malicious, on the other hand people are really
annoyed by it... Officially they do not fall under the category "Malicious
code" however, so we need to analyze every single instance of such dialers
to see if virusdefs should be or should not be created.
