"JS/Noclose.gen" ooops?

GAMER · Post by **GAMER** » Mon Jul 12, 2004 1:16 am

Can any of you help me out with a problem? I got this virus yesterday and i think i got rid of it but i'm not sure. It's called the "JS/Noclose.gen" and it was hiding in a file called "delayed[1].htm" in my Temporary internet files and kept creating new folders whenever i deleted them. The virus was spyware and changed my homepage to the original site where i got it from so whenever i went online i think it came back again. Today i changed my homepage back and went into safe mode and deleted it and all of the files it had created and then ran a virus check. It came back clear and everything seems back to normal. Is it gone for good?

B)GAMER

nastypoisonspikes · Post by **nastypoisonspikes** » Mon Jul 12, 2004 2:25 am

There could be a few traces left, but probably nothing that can do any harm.

On another note, HELLO GAMER! It's been ages since I've seen you =(

GAMER · Post by **GAMER** » Mon Jul 12, 2004 3:49 am

Yeah, you haven't been lurking? I missed ya buddy!

Ok. So my computer will be fine now?

GAMER

Interon · Post by **Interon** » Mon Jul 12, 2004 6:14 pm

Download F-Prot for DOS, then do a full system scan.

http://www.f-prot.com

Post by **wardrich** » Mon Jul 12, 2004 8:28 pm

GAMER *hug* great to hear from you again! I tought you'd left! add me to your MSN list.

Anyway, AFAIK, your computer should be clean the second you whip off that file.

-Richard-

Post by **Wally** » Mon Jul 12, 2004 9:57 pm

well it depends.

AS darren mentioned to me once try an online panda scan http://www.pandasoftware.com/activescan and then wait until complete..

It should remove all viruses.

x86_Game-Junkie · Post by **x86_Game-Junkie** » Tue Jul 13, 2004 1:59 am

JS.NoClose...
is a little tricky to remove as it can reduplicate once closed, but all I can or would prefer you to do is get an ad-blocker and an adware/spyware remover...but I believe for you to be fully secure I would suggest buying a security suite such as Norton Internet Security 2004.

Ro@m · Post by **Ro@m** » Tue Jul 13, 2004 3:54 am

well i PM-ed Gamer about a alternative solution

Post by **Wally** » Tue Jul 13, 2004 5:37 pm

In this case an symantec employee like x86-Gamer probably would have the best opinion.

x86_Game-Junkie · Post by **x86_Game-Junkie** » Wed Jul 14, 2004 1:39 am

actually have some of the best advice on symantec products!!

Post by **wardrich** » Wed Jul 14, 2004 2:03 am

x86: What's up with Symantec and trojans? Every time I have one detected, I check symantec.com and do the Security resopnse thing, but

1) The file(s) it tells me to delete aren't all there
2) I've never ONCE been able to find the registry strings to delete...

-Richard-

GAMER · Post by **GAMER** » Wed Jul 14, 2004 3:37 am

Yeah. I had a problem with it duplicating itself...But i think it only did it like 5 times and then i found the file that was doing it so when i got that no more folders were created...What's an online Panda scan? Also, what's Symantec?

GAMER

Post by **wardrich** » Wed Jul 14, 2004 2:36 pm

I dunno how it works, but I think Symantec pwnz Norton.

-Richard-

Interon · Post by **Interon** » Wed Jul 14, 2004 2:40 pm

Yes it does. A long time ago (the 80's?) some guy named Peter Norton made DOS utility software. I guess Symantec bought him out, then just retained his surname on the products.

Post by **Wally** » Wed Jul 14, 2004 5:55 pm

HE also made mac uttility software for those who wanted to know :|

I think he made mac 1st im not sure.

Post by **wardrich** » Thu Jul 15, 2004 12:15 am

Wally, Wally, Wally.... you and your Mac's...

-Richard-

Ro@m · Post by **Ro@m** » Thu Jul 15, 2004 1:16 am

LOL

x86_Game-Junkie · Post by **x86_Game-Junkie** » Thu Jul 15, 2004 1:55 am

Rich: not all are files on the HDD, some are actually registry entries in RegEdit!!

Anyways Gamer: Symantec own all Norton products and Symantec Corp/Handheld Products, they also own PartitionMagic 8, DriveImage 7 and PCAnywhere v11. Panda owns Panda AV which I have say is crap compared to Norton's!!

Ro@m · Post by **Ro@m** » Thu Jul 15, 2004 3:27 pm

some are actually registry entries in RegEdit!!

i know that you must disable them in msconfig,right?

Interon · Post by **Interon** » Thu Jul 15, 2004 5:28 pm

MSCONFIG is one way to disable them. The registry is another (MSCONFIG is way easier).