Virus/spyware in gnida.swf
Posted by mikeg on January 9, 2008
I was visiting www.fave.com (I use them for bookmarking) and Norton kicked up the following warning:
Scan type: Auto-Protect Scan
Event: Threat Found!
Threat: Downloader
File: C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\DTKTQ6BK\gnida[1].swf
Location: C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\DTKTQ6BK
Action taken: Clean failed : Quarantine failed : Delete succeeded : Access denied
Date found: Wednesday, January 09, 2008 9:21:56 PM
I was a bit surprised that Norton found a threat in SWF file, but after a few searches it seems to be a real issue:
http://msmvps.com/blogs/spywaresucks/default.aspx
http://seo.mhvt.net/blog/?p=180#more-180
I usually do not download anything sketchy, so it’s good to be reminded that Norton works!
P.S. Judging by the name, it was created, or was intended to imply that it came from Russia. “gnida” is not a very nice word in Russian.
