'Quarantineed' - What Now?

Chip Fossa · Post by **Chip Fossa** » 27 Apr 2002 9:23 am

Norton found a virus on my system yesterday.
Something called: JS.Exception.Exploit -
file type = APO.jse. Norton said to try and repair it; it WON"T repair.
Then Norton said: If file can't be repaired then I should consider sending it to SARC for analysis.

What is SARC, ya'll, and what should I do with this virus? Thanks everbody.

I hardly ever run into viruses.

ChipsAhoy<FONT SIZE=1 COLOR="#8e236b"><p align=CENTER>[This message was edited by CHIP FOSSA on 27 April 2002 at 10:24 AM.]</p></FONT>

Donny Hinson · Post by **Donny Hinson** » 27 Apr 2002 2:35 pm

S.A.R.C. is Norton's parent corporation's (Symantec) own research site. They collect viruses, analyze them, and then update their software so you can be protected if you have it installed. Sounds like your computer is still working, though! Luckily, most viruses are benign...they do no actual harm, and they're content to merely propogate whenever they get the chance. Update your anti-virus software often, and take your computer to a good tech when you have a problem. Most all viruses that can be identified (as yours' was) can be purged. In the meantime, be careful what you download, and from where it comes.

Also, be advised that the most popular e-mail tool (Microsoft Outlook) is also the #1 target of nefarious types that write virus programs, probably because so many businesses now use it. What to use instead? A simple e-mail program (most browsers have one).

Chip Fossa · Post by **Chip Fossa** » 28 Apr 2002 4:19 am

Thanks Donny. Well taken advice. I do use Outlook Express. I don't download a lot of stuff, and the places I do it from, are pretty secure.
I used to download like crazy, when I first got a PC.
I guess I'll send the info off to Symantec.
I'm assuming, then, that quaranteen means the virus is in a safe haven?

Thanks again...ChipsAhoy

Donny Hinson · Post by **Donny Hinson** » 28 Apr 2002 5:54 pm

I believe tht's right, Chip, the computer simply ignores the infected file or application that it's in when it has "quarantined" it. I'm far from an expert, and I've never heard of a ".jse" file extension. It probably has something to do with a Java script, though. Most fancy websites use some Java these days.

Mark Ardito · Post by **Mark Ardito** » 28 Apr 2002 6:18 pm

Chip,

Delete the file that is in the Quarantine. It is fine to delete it.

Mark

Chip Fossa · Post by **Chip Fossa** » 29 Apr 2002 2:52 am

Thanks Donny and Mark. I saw, Mark, in another thread where you mentioned to go ahead and delete a quarrantined file.

Norton is a bit confusing on this.

Am I supposed to locate the uninfected file somwewhere and 'restore' it? Norton says to
'delete' and 'restore'.

Well, if you delete 1st, then the file is gone, so you can't restore.

If you 'restore' 1st, then Norton says you will be restoring an infected file.

It's got me??!!??

Mark Ardito · Post by **Mark Ardito** » 30 Apr 2002 6:29 am

Chip,

Just delete the file.

Most viruses creat 'duplicate' files and infect them, but not all. Some viruses change the file extension (ie .doc, .xls, .jpg, .mp3) and change them to .vbs files. These are script files that run a script when executed.

The file you have described is safe to delete.

Mark

Michael Johnstone · Post by **Michael Johnstone** » 4 May 2002 7:18 pm

Get a Mac

Chip Fossa · Post by **Chip Fossa** » 5 May 2002 6:57 am

Hey Michael,
That, too, is not a bad idea.