Discussion Locked

Norton SystemWorks 2002 Pro Question.

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

If you have the program installed, please run find files for VCSETUP.EXE on C:\Drive. &/or VcCleanUp.exe

Trying to find out if it's a normal Symantec file for cleaning up after Live Reg, or a true Trojan such as Trojan.Downloader.Aphe.

Sent the question to Symantec a few day's ago but still no answer.

Question is, is it a normal part of SystemWorks Live Reg or not? I don't want to rip apart or kill off the program if it's just a cleanup utility of Live Reg. and Symantec seems to me notto want to answer the question I posed to them a few days ago.(Could possibly be afraid of the consequences "IF" it is a regular file, of shipping a trojan in anti-virus/anti-trojan software being known). I need to find out ASAP as I know it exists in more than a few machines so far. Good Trojan or Bad Trojan? Are there any Good Trojans? I need to return the machines to service soon.

Thanks all who answer.

5 replies

by drinkin and thinkin

I only have NSW 2000 Pro but the same file is in my machine... if they're shipping Trojans, they've been doing it for a long time.

by cglrcng9

Hmmmmmm, TY for checking, I thought it just might be a file that was in the as shipped version but wasn't sure. I find that indeed interesting to say the least (relieved but interested further). Thanks for looking.

by fred07

It is not a trojan per say. It is your live registration file to assist symatic in your future purchases so you do not retype your registration info every time.
I am sure symantic is on your problem, it just takes time. Have you gone back to your posted question at Symantic and checked it for responces??

by cglrcng9

Again Hmmmm, The file appears on their virus listing site as Trojan.Downloader.Aphe., as do the removal instructions, had the entry in the registry existed where they call out instead of a few lines away I may have ripped the heart of the program right out. Not a very good combo (to use a file you call a "bad" Trojan on your site to do "a good deed" in an anti-virus/anti-trojan package), I'd have to say. Seems like that could also end up to be in some cases a vulnerability also.

I used thee-mail support option so I didn't know there was anything or anywhere I could go to receive the feedback or answer on a posted question except my e-mail inbox. It was not posted as a forum post there. If you have any further info please advise, k? I still find the entire concept troubling to say the least, and WinDr. pointed out the file itself (an application extension), as it was somehow located in the wrong place after a re-install (in a C:\WINDOWS\TEMP file). A quick web search and I was looking @ Symantec's own removal instructions. Go figure! Thank's for the info as I saw what you did (C:\Program Files\Symantec Shared\Live Reg file).

This discussion is closed to new replies.