Member Avatar for annamarie

My local server is sending me messages stating that I have many viruses. I run Norton regularly how can that be? I run the updates all the time. So which one is better AGV Antivirus or Norton? I appreciate your comments. Thanks a lot!:confused:

  • 7 Contributors
  • 9 Replies
  • 275 Views
  • 6 Years Discussion Span
  • Latest Post Latest Post by stef32

Dani AI

Generated

Context and quick diagnosis: reported server warnings about “many viruses” despite running Norton. That situation commonly comes from one of three causes — false positives at the mail gateway, an account or server component that has been compromised and is sending infected or spoofed messages, or an actual workstation/server infection that an on-access scanner has missed. ’s suggestion to run a second-opinion scan and ’s note about Netsky and “best practices” are on point: layered checks and containment are the right first moves, since different scanners can produce different results (as observed).

Immediate triage checklist (fast, order matters):

  • Isolate the suspected host or service from the network to stop outbound mail and propagation.
  • Inspect raw message headers for the notifications to identify the originating IP and mail server path.
  • Check mail server outbound queues and logs for spikes, identical subjects, or repeated recipients.
  • Run offline/bootable rescue scans and a second-opinion scanner from a clean environment (avoid relying solely on the running AV).
  • Collect evidence (file paths, hashes, timestamps) and quarantine — do not delete before verification.

Quick commands for fast triage (examples):

# Windows
netstat -ano | findstr :25
tasklist /svc
schtasks /query /fo LIST /v

# Linux
ss -antp | grep :25
ps aux --sort=-%mem | head

Remediation and prevention: rotate affected account and admin passwords, apply all OS and application patches, examine startup items and scheduled tasks for persistence, and restore any heavily tampered systems from a known-good backup or a reimage if a rootkit is suspected. At the mail gateway level, block executable attachments, implement rate limiting and authentication (SPF/DKIM/DMARC), and consider outbound filtering to prevent repeat incidents.

Practical note: treat scanner detections as leads, not final judgments — verify file hashes and behavior before wholesale deletion. The combined experience in this thread (online scans, vendor writeups and layered toolsets) still applies: containment + forensics + a clean offline scan and recovery plan give the best chance to stop the incident and prevent recurrence.

Recommended Answers

All 9 Replies

Member Avatar for crunchie

Norton is better in my opinion, although it uses more resources. If you are worried about viruses Go here for an on-line scan & set it to autoclean for you.

Member Avatar for annamarie

Hi Crunchie:

I followed your instructions and I'm hoping this will help me. I want to thank you for your help.

Thanks again,

Anna Marie

Member Avatar for annamarie

Hi Crunchie:

After finishing the scan I was told that I am in medium risk of getting Worm Netsky.y. Can I get some feedback from you about this? Thank you very much.

Sincerely,

Anna Marie

Member Avatar for DakotaRain

I also have Norton and it allowed a trojan "Loader.exe" enter my PC, although i use WinXP and get the error msg. unable to find Service Pack 5.1, etc and went onto Norton web site, you can manually pull down the latest dat files to protect your PC. Many say that Norton is best out there, but, I do believe that if you do your research they all about the same. :o

I use www.google.com for most of my research, it comes up pretty accurate.

I know I didn't answer your question as you may of wished it to be, but hope it helps. Also, you can go to www.windows.com and look at the latest upgrades that your PC may need to allow Norton to work properly.

DakotaRain

Member Avatar for DMR

After finishing the scan I was told that I am in medium risk of getting Worm Netsky.y. Can I get some feedback from you about this?

More information on the virus can be here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.y@mm.html

Pay attention to the "best practices" recommendation in the above link; those are general guidelines which, if followed, will minimize the likelyhood of getting infected. Using Windows' and and your anti-virus software's auto update functions to make sure that you have the latest bug fixes, security patches, and virus definitions is key here.

Member Avatar for goodtaste

Let me throw something into the mix. . .the last computer tech that worked on my machine said he liked Panda better than Norton, would Panda be an option? I don't know enough about it to suggest it, you'd have to research it (and do it well) before you make up your mind.
Take care!

Member Avatar for DakotaRain

IT worked great thank you for the information that you gave Ann Marie, it found 3 in my PC that Norton or McAfee couldn't and removed em. Two which went into Volume control the other was in my program files.

Hats off to you Crunchie! :p

More information on the virus can be here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.y@mm.html

Pay attention to the "best practices" recommendation in the above link; those are general guidelines which, if followed, will minimize the likelyhood of getting infected. Using Windows' and and your anti-virus software's auto update functions to make sure that you have the latest bug fixes, security patches, and virus definitions is key here.

Member Avatar for j1979c

I guess whatever anti virus one may use is all the same. It's just a matter of what you download and your surfing habits, if it's good or bad. I've never got a single virus since 2002. For me, just using AVG is pretty safe....nothing beats free stuff...

Member Avatar for stef32

I recommend you to use Microsoft Security Essentials + Comodo firewall + Malwarebytes anti-malware. This combination is very efficient and free.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.