This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos detects Dame virus in bootcamp partition, is this a false positive?

Sophos has flagged up several files on the bootcamp partition that are infected with the Dame virus, these files are all located here:

/Volumes/BOOTCAMP/ProgramData/NORTON/

All end with the .qdb file extension. Norton 360 is installed in the bootcamp partition (which is running Windows 8) and that doesn't detect anything. Any ideas what may be causing it (as I would have thought it unlikely that a known virus from the 90s would be missed by Norton).

Many thanks in advance!

This thread was automatically locked due to age.

0 QC over 12 years ago

Hello jshoughton,

AFAIK the .qdb extension is used by Quicken and the location suggests that Norton backs them up? If so then maybe it reformats them and introduces some pattern which triggers the DAME detection (which would be a false positive in this case). You should send in a sample as outlined here.

Christian
:1012062
Cancel
Vote Up 0 Vote Down

Cancel
0 GTG over 11 years ago

Sophos quarantined DAME in my computer (through FixMe Stick) - should I unquarantine it?
:1013667
Cancel
Vote Up 0 Vote Down

Cancel
0 Diz over 11 years ago

Depends if they are clean or not. As QC advises above your post...the only way to be sure is to submit a sample of the file(s) and see what your hear back about them.
:1013695
Cancel
Vote Up 0 Vote Down

Cancel